Removing a Certificate Authority
I've recently noticed that there are two CA's on my network - one that my predecessor setup on a rather obscure server (<sarcasm>which obviously was fantastically documented along the wealth of information that was left about everything else... </sarcasm>).
Obviously I want to remove the older CA... but I notice that there are some certificates issued to my DCs using the "Domain Controller" certificate template.
My question is this... what happens if I remove the old CA? Are these certificates of importance? or will my DCs just automatically sort themselves out?
Or (!) will everything go horribly wrong? (Night becoming day, up is down, white is black, existence is nothingness... that sort of thing.)