u/Icolan

Hi,

I have renewed our offline root CA and deployed it to the online intermediate CA, but when I go to the web enrollment site the download chain link still provides the old (still valid) offline root certificate in the chain. Where is it pulling that certificate from?

I am still in the process of deploying the new cert so I have not updated it in AD or pushed it out to the majority of our machines yet.

Thank you.