i've some questions related to the certificate lifecycle and administration doing of a Offline Root CA and an subordinate Enterprise Issuing CA.
I've installed the Root CA with a lifetime of 20 years and an CRL publishing intervall of 3 month.
The Issuing CA is installed for 5 years lifetime.
Which tasks have to be done?
When do i need to bring the Root CA online for which tasks to be done? CRL publishing, Certificate Renew?...
Plesae i need some clarification!