Active Directory Certificate Services %1 will reduce the maximum lifetime of the issued certificate for request %2 because ...

Active Directory Certificate Services %1 will reduce the maximum lifetime of the issued certificate for request %2 because the CA certificate lifetime is shorter than the registry validity period.  Consider renewing the CA certificate or reducing the registry validity period.