I have created a CA root certificate and a device certificate to go on my device signed by the CA certificate.
My question is as follows:
Can you make the device certificate last for 30 years, and the root certificate only 20 years, but just create a new root certificate based on the same private key, which would last an additional 20 years?
Would this allow the same old device certificate to continue working with the new root certificate, or would it be rejected?
I appreciate this question might be a bit odd, and if its not clear let me know.