I am using a Windows Certificate Authority to issue certificates that are sent to a service hosted by Tomcat. I've added the Root Certificate to Tomcat's server keystore. The root certificate contains the CDP which includes the file: URI. For example: file://\\serverDNSName/CertEnroll/CAName/etc. The latest version of Java, 1.6.0_20 throws and exception due to the backslashes in this URI. I can create a new root certificate without this path but that will invalidate all the certificates I've already issues. Is there a way to remove this from the root certificate while preserving it? I appreciate any help with this. Thanks!

No you cannot change a certificate CDP without issuing a new one. Martin