I'd like to update the certificates on ALL my NetWare boxes so they expire on the same day. The problem with this is by default pkidiag will only update certificates if they are less than 60 days from expiring.

However, I believe if I run pkidiag, switch option 4 (fix mode), then change option 6 to "Always rename and create" I will update certificates that are more than 60 days from expiring.

Does this sound correct?