Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
For anyone else that ran into this use case, this is how i solved it.-You need to enable ISSUER-CN wildcardsNOTE: Luckily for us both the old and the new CAs names share some of the same strings, so i'm matching on them. But they are to be interprete...
Step 4 doesn't work as advertised. I have this exact issue and had already done what it looks like you recommend here.. and I get a cert validation error. It seems to be doing an AND not an OR. Also you shouldn't need to distribute the new xml to ex...