Q. Custom extensions in the CAPolicy.inf file do not take effect after you renew the root CA certificate by using a new key?

Microsoft Knowledge Base Article 927169 Describes a problem in Windows Server 2003 Service Pack 1 or Windows Server 2003 R2. After you add custom extensions in the CAPolicy.inf file and renew the root certification authority (CA) certificate, the custom extensions do not work.