Hacker News new | ask | show | jobs
by masklinn 2093 days ago
> what happens to all active certificates when the root key expires?

They expire, but normally the CA wouldn't issue certificates outliving their root.

It can be a concern for legacy devices whose trust store doesn't get updated, but really no more so than any other cert expiration or revocation.