When working with Active Directory Certificate Services (AD CS), you occasionally encounter messages that initially look like errors but are actually expected behavior. Recently, while working on certificate revocation testing in my lab, I encountered exactly that situation.
I was using the Windows Certificate URL Retrieval Tool (certutil -verify -urlfetch ".\TestCertificate.cer") to verify the Authority Information Access (AIA) and CRL Distribution Point (CDP) locations of a newly issued certificate.