I understand the following:
- An end-entity certificate is installed on the server and a new one needs to be installed by the webmaster when it expires
- A root certificate is installed on the computer and a new one will likely come in an OS update for when it expires
- A intermediate certificate is installed on the server, but what happens when it expires, does the webmaster need to get a new one of these too?
I need to know how an immediate certificate gets updated, does the webmaster get sent a new one to upload to the server with its normal end-entity certificates?