NPS certificate present but RADIUS auth still fails on Wi-Fi
Scenario
Wireless or VPN auth fails even though the NPS server has a valid certificate installed.
Subordinate CA certificate renewed but issuing templates fail
Scenario
A CA renewal appears complete, yet new certificate issuance begins failing for previously healthy templates.
Revocation check timeout breaks internal LDAPS connections
Scenario
Internal apps fail LDAPS or TLS checks because revocation lookups hang or time out.
Autoenrollment succeeds for users but not computers
Scenario
User certificates issue correctly, but domain computers never enroll for the expected machine certificate.
AD CS web enrollment loads but certificate request submission fails
Scenario
The web enrollment page opens, but submissions fail or never issue the requested certificate.