Hi all, we have changed our domain certification authority (i.e. removed the AD CS server role and added it again with different CA name). New CA root certificate distributed via group policy. Everything seems to put up quite good with that, however, the Windows Explorer, when you open it from start menu or taskbar icon on any client computer, just hangs with only Favorities and Libraries rows shown in the navigation pane, having the magnifier glasses stuck searching. However, entering any network disk into the address bar works and you can browse it in the right pane. But no icons of network share files are visible, and sorting and searching does not work (only shows progress bar in the title bar but nothing happens). Open and close file dialogs works without problems. Local administrator can start the explorer withour problems, sees the icons and can sort few times. Fresh restart of the client computer helps for a short moment only. No errors or warnings in the event log, except that Search reports that the content of <iehistory://SID> is inaccessible. Okay, these are the symptomps I am trying to solve. Now obviously this is due to the CA change and I suspect that the server is presenting itself with an invalid certificate, namely, with a subject name mismatch. My question is, how can I check the certificate the server is authenticating with to the client when performing operations like search, network drive/DFS mappings etc.? Or, maybe what certificate is the Windows Server picking up for these purposes could help too. Thank you for any hints, Jan