Comment by stackskipton

You still have to rebuild each Application Container with new CACert and deploy them. Depending on teams are working, that can be disruptive.