I installed Enterprise subordinate issuing CA with certutil -setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE so Issuing CA is able to start. I am publishing CRL in a website and able to access CRL from Internet explorer. I rancertutil -setreg ca\CRLFlags -CRLF_REVCHECK_IGNORE_OFFLINE so CRL checking is turned back on but CA is not starting. I am getting "revocation check error'.
How can I start my CA with CRL checking turned on?