C.3.k

WT21

Provision is made for prompt re-signing of affected non-expired, non-revoked subscriber certificates with a new root certificate if the root certificate is revoked.