[TriLUG] openssl - expired root cert

[Ryan Leathers]

About a year ago I set up a home brew CA.
It was good for 365 days.
I foolishly never thought about it again and merrily created and signed
certs for hosts throughout the year.

Now that it has expired what do I do?
I know I can throw out the old and create a new ca cert, but that seems a
bad move since I have numerous host certs in use which have been signed by
this ca.  What is the right way to handle this?

I must be the first ssl noob to admit doing this since googling offered no
example.