Quick Question: If a domain controller's certificate is issued by one of the 'Trust Anchors', will it validate successfully, or do you have to add the actual DC cert into a trust anchor store in order for it to work?