A4: CA certificates should be updated as per the CA's recommendations or when security vulnerabilities are identified.