In yall's esteemed opinion(s) should I delete all the expired root
certificates from a) my IIS servers, and b) my users workstations?
I recently (this morning) had to update a verisign root certificate that
expired some time ago but went unused until now. In light of that
experience I'm thinking of zapping all expired certs with one
reservation - an expired certificate gives a warning and lets the user
continue, does the same occur for a missing certificate. I'm not really
interested in breaking anything more that it already is just for the
sake of being A/R.
