I have an offline authroitative certificate server for our domain. The CRL on sub cert server expired, the CRL resides in Active Directory. I brought the offline CA up, generated a new CRL, saved it to a server associated with our AD and did a certutil -v -dspublish. This reported that all was well but when I try to start my sub CA it fails whining that the revocation server was offline. I want my sub CA up and working again but don't know where to go from here.