I have read about the option to create certificates for signing codes and time stamping. why do we need both of them? I understand that it helps me when I need to increase the validity of my code, but why not using only one of them with bigger validity period?
For example, let's consider a code signing certificate with one year validity and a time stamping certificate of 2 years. Isn't it better to create only a code signing certificate with 2 years period?
when turning a code signing certificate into a crl, are all its signs invalid? How about turning a time stamping certificate into crl?
Is there a scenario when we would prefer to have a time stamping certificate without code signing certificate?