I just created an offline root CA with a 6 year cert and the idea being I'd create a 5 year for the sub and 2 year certs for web servers, signing, etc..
When I made ran through the step to get a CA cert for the sub through the GUI it only gave me a cert valid for 1 year so now my templates for web servers which I set to 2 years only come out valid for 1.
I would think I just need to make a new request for the sub CA then get a new cert for web servers via the cert template but can't figure out how to make the request to get a CA cert for 5 years. Is this something that needs to be done via command line or powershell?
Thanks.