Certificate Rotation

Problem

A private key may eventually be compromised, algorithms change, and certificates expire. A certificate/key pair cannot safely be treated as permanent.

Solution — Rotation

Replace certificates and keys periodically and before expiry.

Certificate A
     ↓
Certificate B
     ↓
Certificate C

Automation can renew and deploy them without outages.

Core idea: cryptographic credentials need lifecycle management, not just initial creation.