You need to ensure that the Issuer Statement option is available when you install the enterprise CA to the production environment
You need to configure the contoso.com zone to ensure that clients cache records from the zone for 4 days