<i>any old key...</i><p>You can always revoke certificates.<p><i>what does a grace period buy anyone?</i><p>It avoids bad publicity and lost revenue. At some point you don&#x27;t want to continue operating with old certificates, but breaking without warning is a terrable idea.