There is only one enterprise CA server. The server has 4 certificates configured under properties > general. These certificates show up in the local store of all domain computers under "trusted root certification authorities". On my machine there are also 12 intermediate CA certificates listed for the same server. On the CA server, it lists 24 intermediate CA certs for itself in it's own local store.
If I go to sign a PDF, there are 20 chains and many of the chains are missing the root certificates:
I have verified these problem root certificates are missing from the root CA and the local store.
- How do I fix this issue?
- Why are there so many chains?
- How can I reduce the number of root and intermediate CA certs floating around for the single CA server?
0 Answers