Hello
ı make vpn by certificates on routers.Because of expiration date i renew CA certificate on Microsoft certsrv server.After doing that routers can get only old CA certificate and i see two CA certificates on server.Here how i get certificate commands.
crypto pki trustpoint X
enrollment mode ra
enrollment url http://10.5.5.5:80/certsrv/mscep/mscep.dll
serial-number
fqdn X.X.gov.tr
subject-name C=TR, O=X.gov.tr, OU=IT, CN= X.X.gov.tr
revocation-check none
rsakeypair X.X.gov.tr
!
crypto pki authenticate X
yes
crypto pki enroll X