alt Hacker NewsI don’t think there’s a ton of benefit to the technique. If you’re worried about getting too close to your certificate expiry via automation, the solution is to renew earlier rather than complicate things with a ladder of valid certs.
Replies
kees99 • yesterday at 12:07 AM
Exactly. It's not like backup certificate have validity starting at a future date.
➕ show 1 reply
There are reasons to do this, just not because of expiry.
The main reason to have multiple certs is so if your host (and cert prov key) is compromised, you can quickly switch to a backup, without first having to sort out getting a new cert issued.