I'm looking for the "best practice" to use in Certificate Pinning or an Alternative.
Scenario: I have a native mobile app and I have pinned the certificate so that the app can validate against my server.
Problem: The problem comes in 1 year when the certificate expires where I need to have all my app users update their app with the new certificate version OR the app will simply not work.
Desired Outcome: I would like to update the certificate pinned in the mobile app without having to have the users update to a different version of the app.
