I have a domain with two domain controllers with certificates that will expire soon, but the issuing certificate authority has been demoted and the member server will be retired soon.
Certificate services have been removed and we don't plan on reinstalling if we can avoid it.
What happens to the domain controllers and active directory when the certificates expire? Do we need to do something manually before that happens?
Thank you.