CA Cannot Publish CRLs to the Active Directory After the First Certificate Expires

View products that this article applies to.

This article was previously published under Q289622

Expand all | Collapse all

SYMPTOMS

When the first certificate issued by a Certificate Authority (CA) expires and the CA chooses to renew its certificates by using the original key pairs, the CA may not be able to publish certificate revocation lists (CRLs) to the Active Directory.

STATUS

Microsoft has confirmed that this is a problem in Microsoft Windows 2000.

Microsoft is researching this problem and will post more information in this article when the information becomes available.