New DoD Interoperability Root CA 1 to DoD/ECA Root CA 2 cross certificate:

To ensure that users do not experience denial of service when performing certificate-based authentication to DoD websites due to the system chaining to a root other than DoD Root CA 2, administrators should run the updated Federal Bridge Certification Authority (FBCA) Cross-Certificate Removal Tool version 1.10. Version 1.10 has been updated to address the recently reissued DoD IRCA 1 > DoD Root CA 2 cross-certificate. The tool and user guide is available from the DoD PKE Tools page. Additionally, DoD PKE has created a new video, Fixing the Cross-Certificate Chaining Issue (https://iase.disa.mil/pki-pke/Pages/videos.aspx), that diagnoses the issue and explains how to use the tool.