There are some reasons for recreating a existing certificate chain:
- compromised root cert
- merging companies
- splitting companies
- new URI for CRL or AIA
- build a test site
Retyping all certificate entries by hand causes a lot of errors. We use templates (fine feature), but creating templates by hand causes also errors:
- forget to set alternate names
- forget to mark critical extensions
- Tab Netscape differs from Tab Extension
Recreating a template from a existing (proper working) certificate saves a lot of time and minimizes the error rate.
Log in to post a comment.