Hi,
You have posted in the general Windows Server 2016 forum, since your issue is related to Certificate Authority I suggest you ask over at the dedicated Windows Server Security forum over here:
https://learn.microsoft.com/en-us/answers/topics/windows-server-security.html
----------
(If the reply was helpful please don't forget to accept as answer, thank you)
Best regards,
Leon