I have inherited an Active Directory domain where certificate services were installed and not put to good use, and not documented. I would like to revamp the infrastructure and actually use the services for many security related applications, but I am unsure what to expect or where to begin. Basically, I am wondering if any one else has had a similar issue and what process was used. I would ultimately like to start over and do things correctly, but I have not found out if this is possible, or if there are any applications that may break. From what I have found so far, the service was mainly used to supply development sites with certificates. Users are issued certificates, but I have never come across any instance of them being used. Any information/help is much appreciated.