YouarethenetworkadministratorforContosoPharmaceuticals.ThenetworkconsistsofasingleActiveDirectoryforest.TheforestcontainsWindowsServer2003serversandWindowsXPProfessionalcomputers.

Theforestconsistsofaforestrootdomainnamedcontoso.comandtwochilddomainsnamedchild1.contoso.comandchild2.contoso.com.Thechild1.contoso.comdomaincontainsamemberservernamedServer1.YouconfigureServer1tobeanenterprisecertificationauthority（CA），andyouconfigureausercertificatetemplate.YouenablethePublishcertificateinActiveDirectorysettinginthecertificatetemplate.Youinstructusersinboththechild1.contoso.comandthechild2.contoso.comdomainstoenrollforusercertificates. Youdiscoverthatthecertificatesforuseraccountsinthechild1.contoso.comdomainarebeingpublishedtoActiveDirectory，butthecertificatesforuseraccountsinthechild2.contoso.comdomainarenot. YouwantcertificatesissuedbyServer1tochild2.contoso.comdomainuseraccountstobepublishedinActiveDirectory. Whatshouldyoudo？（）