What happens to AD bound Macbooks when your Root CA of your domain expires?

Contributor II

So my sites domain root CA is going to expire the 1st of July, and I haven't come across this particular issue until now, and I am concerned about what ramifications it will have on my AD bound client devices.

Presumably I will be using jamf to send through the new root ca to the devices to rectify the problem, but just curious if anyone has been through the process before?