I’m a technical consultant at Atea AS, Norway working with Teams, Skype for Business, Exchange, O365/Azure and Active Directory. My intention with this blog is to post on different technical issues I stumble across on my way through the world.
Hopefully, it can be of interest for some people. And if it should shed some light on different scenarios of deploying, maintaining and troubleshooting solutions including the above mentioned components, the pleasure is all mine 🙂
Universal Communications, My experiences. 
I was reading your post on signature algorithm and I had a question. When you reissue the ca root cert in a 2 tier structure, does this need to be done to the root ca(offline) or just the signing ca?
Hi. This operation was performed on a single tier CA, so I really don’t know. But I would assume that you would have to do it on the CA that’s issuing the certificares.