Scenario
현재 상황
A certificate replacement installs the right chain while one mTLS client still validates against a pinned SAN or EKU expectation from the previous issuance profile during a staged decommission 상황에서 compare issuance profile semantics during renewal, not only chain validity를 중심으로 원인을 좁혀가는 시나리오입니다.