Notes on renewals

[scintill]

Renewal isn't strictly necessary, as you can manually revoke old certs in the portal and/or create new ones with the current codebase. But here are some notes I have, in case someone wants to automate it:

• Similar to what is already implemented
• POST to /pushcert/caservice/renew instead of /pushcert/caservice/new
• A key called CertificateSerialNumber is added in each sub-dict of CertRequestList, and has the lowercase hex-encoded serial number of the previous cert for the given service
  • e.g.

                                <key>CertRequestNo</key>
                                <integer>0</integer>
                                <key>CertificateSerialNumber</key>
                                <string>7585f4f77e9a12df</string>
                                <key>Description</key>
                                <string>DU182 - apns:com.apple.calendar</string>