View source for Windows certificate authority subca offline root


https://learn.microsoft.com/en-us/answers/questions/1320695/the-revocation-function-was-unable-to-check-revoca
```
The revocation function was unable to check revocation because the revocation server was offline
```

Fix - Turn on rootca1 and copy *.crl files to subca(s)
```
scp rootca1.example.com:\Windows\System32\CertSrv\CertEnroll ./
scp CertEnroll\*.crl ica1.example.com:\Windows\System32\CertSrv\CertEnroll\
```