In a recent online course, an instructor stated:
Once you've created a certificate, eventually you are going to have to revoke it, and even if that's just to renew it, really, I mean if you have created a certificate and it's gonna last, say, a year, or maybe three years, ultimately that certificate will have to be renewed, and before you can renew it, you have to revoke it.
Is that strictly accurately? I always thought that certificates which expired naturally (and weren't replaced in the middle of their term) were rejected by clients because they were expired -- not because they were marked as revoked by the CA. Can someone please clarify?