Saving your configuration and map files does not affect subsequent certificate validation requests until you either reload your settings or restart the service.
The following settings require a restart
All other settings changes require a reload.
To reload modified settings
/usr/local/sbin/pkid reload
NOTE:Reloading the configuration also clears the internal in-memory caches used for downloading certificates and CRLs. Although certificate and CRL lifetimes are honored by the cache, it might be necessary to clear these manually if a certificate or CRL has been updated at its source before it has expired.
To restart the service
/etc/init.d/pkid restart