Re: [IETF-PKIX] Multiple certificates for same key?

[Stephen Kent <kent@xxxxxxx>]

Bob,

Ignoring issues of non-repudiation (for which only some certs may be
employed), it may be reasonable for two certs to hold the same public key.
For example, A CA may choose to have a short validity interval to ease CRL
management, but not require users to generate and transmit new key pairs to
match the interval.  In that case, the CA can merely re-certify the old key
and reissue a cert with a new serial number and the same name, and probably
all the other attributes would be the same as well.

Steve