> Yep, and give the new ones a slightly different "full" 
> distinguished name (important for CRL and "ca" database).
> My approach is to include the year-month as an extra OU e.g.
>
>  CN=foo.example.private,OU=isonetwork,OU=2016-03,O=YourCompany 
>Inc,L=YourTown,C=XX

Ooh, that's neat advice!


--  
Senior Architect, Akamai Technologies
IM: richs...@jabber.at Twitter: RichSalz
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to