CA Certificate Help

[ITGURU]

Hi

I set up a Certification Authority server for NPS/RADIUS some time ago, but haven't used for a few years. I've now come to use the set up for wireless.

 

However, on clients I see 2 certificates for 2 servers i.e NPS-001 and NPS-002 and clients seem to have both of these in the local trusted store.

However 001 no longer exists. If I do a certutil it only shows 002 as being active and in AD is only the 1 server under the certificate authority servers.

 

I've checked all GPOs and I cannot find any policy which has these 2 certificates in for deployment to clients.

 

If I delete both, put the workstation on workgroup, then add back to the domain, on first login, both appear.

 

Please could you someone help me as I only need the 002 certificate and it seems the system is pushing out both??

 

Any certificate experts that can help me please?

 

thanks.