Link to Cross-channel: Ronnie Altit article

Root Certificate Renewal: The SCEP Failure We Didn’t Expect
Introduction Certificate renewals are supposed to be boring. Planned. Routine. Low‑risk. Even when a Root CA certificate is renewed using the existing key pair, most environments





