0335302E

Explanation
A CA certificate cannot be deleted because the
database still contains certificates that were signed using that certificate.
 A certificate renewal for a signing certificate fails with this error
code if the certificates subject name has changed.

User response
Delete all certificates that are signed by the
CA certificate before deleting the certificate. To renew a signing
certificate with a changed subject name all dependent certificates
must be resigned with the new certificate:Create certificate renewal requests for each dependent certificate
and delete the dependent certificates and keys.
Receive the new signing certificate.
Sign any dependent certificate requests with the new signing certificate.
Receive the signed dependent certificate renewals.