Hi all, I'm not a big specialist of PKI that's why I'm here to see if someone could help me. I have a PKI which include my two Domain controllers. When I check certificats on DC2 (From Manage CA\Issued certificats) I can see differents Domain Controller certificats with a correct expiration date. Now, when I make the same verification on DC1, I can also see two Domain controller certificats, but those certificats are expired. My problem is on this DC1. If I shutdown DC2, what 's going to happend regarding request on Domain controller Certificat. I mean, I have an application (Websphere) which realize some domain controller request. In this application, when we put the DC1 nameserver, automatically DC2 send a valid response with the right Domain Controller certificate. So, if DC2 is down ... what happend ? Is it possible to recreat some Domain Controller on DC1 and How ? Thanks for your help.