X509CAVersionExtension Class

public sealed class X509CAVersionExtension : X509Extension

Public NotInheritable Class X509CAVersionExtension
	Inherits X509Extension

public ref class X509CAVersionExtension sealed : public X509Extension

[<SealedAttribute>]
type X509CAVersionExtension = 
    class
        inherit X509Extension
    end

Inheritance

X509Extension    X509CAVersionExtension

Each renewal results in a new CA certificate; however, the administrator can either generate a new public/private key pair or reuse the existing public/private key pair for the CA certificate. For consistency and integrity, CA certificates and certificate revocation lists(CRL) issued by the CA before its renewal will be available after the CA has been renewed. To make these available, Certificate Services maintains an index of CA certificates, CRLs, and keys.

When CA server is installed, initial key pair is used and both have zero index. Each time CA certificate is renewed (regardless whether the key pair is changed or not), CA certificate index is incremented sequentially by one. CA private key index is changed only when new key pair is generated during CA certificate renewal and is updated to match CA certificate index.

Reference