Auto-Renewal of Multidomain- / SAN-Certificates via GPO

How to Avoid Having Users Enroll for Multiple Certificates

Multiple CAs in AD-Domain

Discussion about how to issue certs with SAN – do not always use „EDITF_ATTRIBUTESUBJECTALTNAME2“

Why not use „EDITF_ATTRIBUTESUBJECTALTNAME2“

https://blogs.technet.microsoft.com/russellt/2016/04/29/get-crlfreshness/

Very usefull PowerShell Module for working with CAs

Certificate enrollment policy server URI format
LDAP URI for Certificate Enrollment Policy

Certificate Enrollment Web Services in Active Directory Certificate Services

Very useful information on having more than one issuing CA in specific AD

Write-Up and thoughts about CRLs and OCSP

CP & CPS

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc780454(v=ws.10)

SCEP / NDES – getting Linux in the MS CA

https://blogs.technet.microsoft.com/jeffbutte/2016/12/16/236/