Add operation for CA rotation: "strip old certifications"
In the context of rotating a CA key, an operation is needed that strips away all certifications that had been issued by the old CA key.
In the context of rotating a CA key, an operation is needed that strips away all certifications that had been issued by the old CA key.