What should you do to ensure that CERTKILLER-SR02 is able to issue a certificate revocation list for the enterprise root CA?