How to download the most current CA certificate from a certificate web enrollment station

First published on TECHNET on Feb 10, 2007

In some cases, you might want to download the most current CA certificate from a web enrollment station. Use the following URL to do so:

http://www.contoso.com/certsrv/certnew.p7b?ReqID=CACert&Renewal=-1&Enc=b64

Replace www.contoso.com with the DNS computer name of your web enrollment station. The renewal=-1 parameter indicates that the latest certificate is targeted. The index of the renewal parameter refers to the CA certificate that is actually downloaded. 0 would be the CA certificate that was generated during CA setup. 1 is the CA certificate after the first renewal and so on.

Carsten