Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Thank you very much. Debugging the crypto ca 14 showed me the problem. The DC was presenting a cert signed by the default Windows Server CA, rather than the one generated by their PKI CA root which they had exported to me.Thanks again!