Problem:
How do I renew the Root CA certificate on an Microsoft Active Directory Enterprise Root Certificate Authority?
Open certificate console
Right click and go to properties
View the existing root certificate and check dates
Right click and select Renew CA certificate
Agree to stop services and click Yes
Leave key intact so click No, then click ok
Services are started
View new certificate with new date old certificate is still valid and in list