We have built a tier 2 PKI. Recently we decided to start hosting our CDP & AIA on a seperate webserver. However this was not originally in the design, so now we have problems with the certificate chain as the webserver is included on the Root certificate. Just to verify whether this was the problem i made one of our subordinates publicly accessible for a brief period of time so it could retrieve the Root AIA information on it, and this indeed fixed the certificate chain issue, so I need to include the webserver on the Root AIA certificate info and host the AIA on that server.
So know I can fix our problem by changing the Root AIA url's, adding the webserver to it and reissuing the subordinate certificates, however is there also a way that does not include renewing the subordinate certificates?