Because you cannot increase the 64-KB limit, the recommended solution is to remove any unnecessary certificates from the user object in Active Directory.

• 因为您无法增加该64-KB限制,所以,建议的解决方法是从Active Directory的用户对象中删除所有不必要的证书。