A parks reservation API still serves a certificate copied into place years ago and now past its notAfter date. Callers fail trust checks. Beyond the initial install, what must application-specific certificate configuration include?
Select an answer to reveal the explanation.
Short Explanation
A sticker that expired last winter still looks official until someone checks the date. Configuring an app cert includes replacing it before expiry—new material, remount, reload—not a one-time copy from years ago.
Full Explanation
Application-specific SSL configuration is a lifecycle, not a one-time paste. An expired leaf takes the API offline for validating clients. The practice is to replace cert and key before notAfter, update the mount or secret, and reload TLS. Disabling client checks or falling back to cleartext abandons the security goal.