Auto-Renewal of Multidomain- / SAN-Certificates via GPO
How to Avoid Having Users Enroll for Multiple Certificates
Discussion about how to issue certs with SAN – do not always use „EDITF_ATTRIBUTESUBJECTALTNAME2“
Why not use „EDITF_ATTRIBUTESUBJECTALTNAME2“
https://blogs.technet.microsoft.com/russellt/2016/04/29/get-crlfreshness/
Very usefull PowerShell Module for working with CAs
Certificate enrollment policy server URI format
LDAP URI for Certificate Enrollment Policy
Certificate Enrollment Web Services in Active Directory Certificate Services
Very useful information on having more than one issuing CA in specific AD
Write-Up and thoughts about CRLs and OCSP
CP & CPS
SCEP / NDES – getting Linux in the MS CA
https://blogs.technet.microsoft.com/jeffbutte/2016/12/16/236/