Hello, I am working on upgrading a domain to Windows 7 clients. The domain is Windows 2003 Server. I currently use VeriSign Shared Service Provider certificates that chain to the Common Policy (2). When I view a certificate within XP Pro SP3 the displayed chain has three tiers that end in the Common Policy (2). On a Windows 7 computer, the displayed (4 tier) chain ends in Common Policy with Common Policy (2) as its subordinate. The certificates also have different validation dates displayed from one OS to the other. Does anyone know if this is a bug? Any recommendations on how to correct this would be appreciated. Thank you.

Hi, I suggest you asking VeriSign website for further help: http://www.verisign.com/support/index.html Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding. Regards, Leo HuangPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hello, Unfortunately VeriSign has not been able to assist with any PKI problems lately. I am not sure but maybe they changed some personnel when they were purchased by Symantec. Either way, I know there is trouble when VeriSign Enterprise PKI support has never heard of certutil. Which is why I am asking the Windows experts. Perhaps I should pose the question in the Server Security forum. I will wait a bit longer to see if I get responses here. Thank you