Common Issues:
| Issue | Fix |
|---|---|
| CA service won't start | Check permission on CA private key & Event Viewer logs |
| Certificate requests failing | Ensure proper templates are published and auto-enrollment is on |
| CRL not publishing | Verify file share/URL for CRL distribution point (CDP) |
| Expired CA certificate | Renew CA certificate using certutil or MMC |
