But don't you think C) It requires the collection of the old root CA certificates from all the users is also a major issue? It can be difficult to track down all the old certificates.
Option B seems like the most logical answer here. Distributing the new root CA certificate to all PKI participants is the main challenge in a renewal process.
Reita
4 days agoRolande
12 days agoRosann
13 days agoMary
16 days agoBasilia
18 days agoBettina
4 days ago