Patent ID: 8862874

Claim:
A computer implemented method for certificate distribution, the computer implemented method comprising: sending from a client to a server, using a processor and a memory, an indication in a request, the request being a part of a secure data communication to the server, wherein the indication is sent when an old certificate of the server is valid for use in the secure data communication with the server and a validity period of the old certificate of the server is set to elapse within a predetermined future period from a time of the secure data communication as determined by the client, the indication being a parameter in a defined structure of the request, the indication indicating an ability of the client to accept a replacement server certificate as a part of a response, and the indication causing an action to occur at the server with respect to the validity of server's old certificate; receiving at the client, responsive to the indication, the replacement server certificate from the server in the response corresponding to the request; separating the replacement server certificate from the response; and using the replacement server certificate in the secure data communication.