I'm quite new to code signing and could not find clear answers to the following general questions so far. It would be great if someone could clarify/explain the logic behind this and point me in the right direction:
If a code signing certificate expires and needs to be renewed, can the subject attribute be changed for the new certificate without invalidating the previously created signatures? Is the public key dependent on this attribute?
If a new certificate has to be created instead, what needs to be done in order to make sure previously signed code will still be valid (e.g. use the same private key?)
Java code has been signed and deployed with a code signing certificate and delivered to customers. Certificate expires and needs to be renewed/re-created in order to keep the signature valid.