Hello

ı make vpn by certificates on routers.Because of expiration date i renew CA certificate on Microsoft certsrv server.After doing that routers can get only old CA certificate and i see two CA certificates on server.Here how i get certificate commands.

crypto pki trustpoint X

enrollment mode ra

enrollment url http://10.5.5.5:80/certsrv/mscep/mscep.dll

serial-number

fqdn X.X.gov.tr

subject-name C=TR, O=X.gov.tr, OU=IT, CN= X.X.gov.tr

revocation-check none

rsakeypair X.X.gov.tr

!

crypto pki authenticate X

yes

crypto pki enroll X