I installed Active Directory Certificate Services and created a Standalone CA. Everything went fine and it automatically installed the CA certificate and CRL on all my domain workstations.
On one of the workstations, I deleted all instances of the CA certificate and CRL from the Certificates snap-in. Now I can't figure out how to reinstall them. gpupdate doesn't do it.
I do not want to do it manually. It has to be automatic and must be identical to the original installation i.e. the CA certificate must appear in all the folders it previously was in in the Certificates snap-in and the CRL must also be installed. Similar to what would happen if I joined a new workstation to the domain.
Running
certutil -pulsebeforegpupdatemade the workstation re-install the certificates.