3 ms·
Party A currently uses certificate X, which Party B trusts. Party A then creates a new certificate Y. Party A signs certificate Y with certificate X and Party B
by jlgaddis 10y ago
Party A currently uses certificate X, which Party B trusts. Party A then creates a new certificate Y. Party A signs certificate Y with certificate X and Party B can then be sure that it is legit.
A similar thing happens sometimes when new GPG keys are generated. Google for "GPG transition statement" for how that works (it's effectively the same process).