'Do all certificates in infrastructure need renewed after renewing windows CA/SubCA certificates?

This Windows CA and Subordinate CA certificates needed updated on my domain. This has been completed and the expiration year now shows 2032. When renewing, I did NOT generate a new Public and Private Pair.

There are several apps on the domain using the Windows CA/SubCA in their TLS certificate chain.

Some of these applications may not be authenticated into the actual Windows domain. For example, there are Linux applications that contain the older CA/SubCA certificate chain that was imported into Nginx, Apache, etc. VMWare Vcenter is also using the CA/SubCA certificates.

Do the certificates on all of these applications/systems need to be renewed manually? Do I need to update the certificate chain for Nginx/Apache with the CA/SubCA certificate containing the new validity date?



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source