My certificates expired and I needed to renew my issuing CA certificate from the offline root. Using certutil -dspublish I published the new root certificate and the new root CRL file.
Now within Enterprise PKI MMC the ldap path to the AIA certificate is fine and able to download the cert. But the ldap path to the CDP is listed as "unable to download". I checked the path with ADSI edit and ldp. The path is correct.
Not sure how to fix this issue. Any help or insight is much appreciated.
Joel