Migrated CA from old 2008 DC to new 2012 R2 DC and certificates are not being issued. Auto enrollment setup but Templates are unavailable. Added rights to Public Key Services and no difference. Now one of the DC's certificate's has expired and it is not being issued a new one. Not sure what to do at this point. Should I just rebuild a new one not on a DC and go from there?