I recently took over an AD environment and have been reviewing all the servers on the domain. I have an offline certificate authority(not on the domain) and an enterprise authority both running on Server 2008r2. How can I figure out if it is being used and what for? I did notice that all of the certificates that had been issued expired in 2009. An suggestions you might have would be very helpful. If it is not being used, would I be able to decommission these servers?