removing old certificate from metadata

[Izz Noland]

I just want to be sure of the following, since we ran into issues when trying to do a cert rollover 2 months ago.
Our metadata currently has two certificates.  I want to remove one that is about to expire.  It is not referenced any longer in our SP configuration, and IdPs haven't had any issues since we were able to recover from a mistake made in the cert rollover in June.  Anyone see any issue with either of the following:


1.      Just removing the old certificate from the metadata with InCommon

2.      Leaving the certificate which is about to expire, since it isn't used

a.       For informational purposes.  Are there cases where configs would reject metadata if an expired certificate is in it, although no longer utilized?

I know this sounds simple.  Just doing my due diligence to ensure we don't have an issue when removing the cert from InCommon metadata.

Thanks,
Izz

Izz Noland
Sr. Systems Engineer
[wepa_logo-solid]<https://www.wepanow.com/>
[email-icons_03]izz.noland at wepanow.com<mailto:izz.noland at wepanow.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160810/466b655d/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6085 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20160810/466b655d/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.gif
Type: image/gif
Size: 130 bytes
Desc: image002.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20160810/466b655d/attachment-0001.gif>