I moved my Enterprise root CA (very small, can be recreated) to a new server a while back.
I have two outstanding problems :
1. In AD sites and services - Public key services - CDP I still have the old server as a distribution point for two old CA certificates (but not for the most recent one). Can I just delete the old server entry?
2. The CA certificates themselves (even the new one) still show the old server as the CRL Distribution point. So I have some error in my CRL publishing. I wonder if I remove the service in point 1 and then renew my CA cert, will is get the right CRL Distribution point?