Microsoft Knowledge Base Article 927169 Describes a problem in Windows Server 2003 Service Pack 1 or Windows Server 2003 R2. After you add custom extensions in the CAPolicy.inf file and renew the root certification authority (CA) certificate, the custom extensions do not work.