Renew Issuing CA Certificates with OCSP

Опис:

In my previous video "Two Tier PKI Lab with CDP and OCSP" we built a standalone root CA, an enterprise issuing CA and a separate web server hosting the CDP and OCSP. Now it is time to renew the issuing CA certificate. At first thought it seems like a no brainer, but OSCP needs some mitigation to ensure the OCSP server can obtain new OCSP signing certificates after the issuing CA certificate is renewed.