Also, in some environments, you can request a ca to generate a ca certificate for a self-signed certificate, which validates and resigns the previously generated certificate.
If you are your own CA, you control that CA as long as no one else has it.
如果您是自己的CA，那么只要别人无法染指您想控制多长时间都行。
3
When the ca USES a self-signed certificate, called a Root ca, the ca usually publishes its self-signed certificate details publicly so that users can establish the authenticity of the ca.