I have an old (now non-existent) enterprise root CA still showing up
in my domain member's trusted roots list. Anyone know how I can
manually remove from AD, revoke, or otherwise expire the thing? CA is
win2003 member server in a win2k AD domain.