ParentFull threadScott_Helme_·The only safe way to try and do that would be to make sure that the max-age of your policy was never more than the remaining validity of your longest valid certificate.View on HN