You would like to enable CAPI2 logging for troubleshooting a certificate issue. CAPI2 Diagnostics feature provides administrators with an ability to troubleshoot PKI problems by collecting detailed information about certificate chain validation, certificate store operations and signature verification.
Note: For CAPI2 Diagnostics, the log tends to grow in size quickly and it is recommended to increase the log size to at least 4 MB to capture relevant events. To increase the log size, right-click Operational, and click Properties. In the log properties, increase the Maximum log size (KB) to 4096. You might consider disabling CAPI2 logging after sufficient data has been gathered.
For more information on CAPI2 logging, please review the Microsoft article: