certutil –setreg ca\CRLFlags -CRLF_REVCHECK_IGNORE_OFFLINE