certutil –setreg ca\CRLFlags +CRLF_REVCHECK_IGNORE_OFFLINE