Hey Lilja, It ended up being really painless to do. I renewed all of my certs in the chain (even the root) and exported them to the IVE. I now have my old CA chain listed as well as my new CA chain listed. On 1/25 I'll delete my old one in order to clean up. OCSP and CRL are working as expected with the new certs. Thanks for the feedback. ... View more