New root CA with same private key

Question

Hi

Our windows root CA certificate is about to expire. If i renew the root certificate with the same key, will the old root ca stop working or will they both work until the old one expires?

If i create a new root ca with a new private key, will all certificates that were created before, stop working after the old root certificate expires?

Thanks for the help

BR
Carlos

Answer 1

Hi

If you keep the same public and private key , all certificate created before will continue working.

You have to select no for generate new public and rivate key as mentioned below to keep existing certificate working:

For more details I invite you to read the following link: Renewal with existing key pair

Please don't forget to mark helpful answer as accepted

Answer 2

Hello there,

When you renew the CA certificate with the existing key pair, nothing important in the certificate is changed. The certificate will contain the same public and private keys. As the result, all previously issued certificates will chain up to a new CA cert without any changes. You just replace the old CRT file in AIA download locations.

Technically a root CA certificate cannot be renewed once expired. We can only generate a new CA certificate but when created using the existing key, it can be used to sign existing server certificates.

Root CA certificate renewal [https://social.technet.microsoft.com/wiki/contents/articles/2016.root-ca-certificate-renewal.aspx

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–