Currently have an internally issued code signing certificate that expires next year 2021. We want to stay ahead of this and renew the certificate now, a year ahead, but aren't quite sure on some of the specifics here.
I don't see a real need to renew with a new key, but if we renew with the same key, will the old version of the certificate still continue to work? Or will everything need to be resigned immediately? We want to avoid this if possible and allow everything that was previously signed to still operate at least until the original expiration.
We would need to issue the certificate through GPO as well, but will this create two entries in the GPO for the same certificate, or will it simply update to the new expiration date? We don't want confusion to be created when looking at the certificate store as to which is the correct one.