Rinnovare la validità di un certificato X509 self-signed

openssl x509 -in cacert-old.pem -text

openssl x509 -in cacert-old.pem -days 7300 -enddate -out cacert-new.pem -signkey private/cakey.pem

openssl x509 -in cacert-new.pem -text