CA Key 1 Created OCSP Cert 1 Client Cert 1 Client Cert 2 OCSP Cert 2 CA Key 2 Created CA Key 1 Expiration OCSP Cert 3 Client Cert 1 CA Key 2 Expiration
CA Key 1 Created OCSP Cert 1 Client Cert 1 Client Cert 2 OCSP Cert 2 CA Key 2 Created CA Key 1 Expiration OCSP Cert 3 Client Cert 1 CA Key 2 Expiration OCSP Cert 4 Client Cert 3
Root CA Enterprise CA 10 Years 5 Years Device Cert 2 Years
Root CA Enterprise CA 10 Years 5 Years Device Cert 2 Years 1 Year Root CA 10 Years Enterprise CA 5 Years Device Cert 2 Years 2.5 Years Same Key Renewal New Key Renewal 2 Years