Hot answers tagged

3

It depends on what is inside the bundle. I am certain it contains the certification path up to the trusted CA, the question is: does it also include the end server certificate (it's the "full chain" in terms of Let's Encrypt) or not ("chain")? Also, which file contains the private key? You can check that manually by simply looking with a ...


1

Unfortunately, the only way to upgrade the Root CA key is to replace it with a newer, stronger, key pair and afterwards, self-sign a new Root CA certificate with the new pair. The next steps depend on whether you decided to use subordinate CAs in your PKI design. If you didn't go for subordinate CAs, you will need to re-sign1 all end-entity certificates with ...


Only top voted, non community-wiki answers of a minimum length are eligible