I have a legacy exchange server that is also my internal root certificate authority. In looking at all the various nodes and issued certs it looks as though they are all checking in and getting updated certs. From what I understand this is not necessary in a domain environment with standard logins and what not. My concern is that we have an internal Sharepoint server, if I remove the Root CA, will my web browser complain internally when trying to reach the sharepoint server about not having a valid certificate?
