Other Aspects of Key-Pair Management
Public Key Archival
CA public keys are archived in accordance with Section 5.5.
Certificate Operational Periods and Key Pair Usage Periods
CA Certificate Key Pairs are not reused and therefore are valid for the life of the Certificate, up to, but no more than, 20 years.
There is no stipulation in the usage period of Subscriber certificate key pairs.
Certificate operational (validity) periods are defined in Appendix A.