Is it possible to configure auto-renewal of an Enterprise root CA certificate, so the root CA certificate itself auto renews? If there's no built-in mechanism for auto-renewal, can it be done with certutil.exe or PowerShell so it can be scripted and run as a scheduled task?
Thanks.