>but when it was issued and when it "expires" absolutely do not. Of course it does. A certificate is more than a key. It's an attestation that the signer verif

>but when it was issued and when it "expires" absolutely do not. Of course it does. A certificate is more than a key. It's an attestation that the signer verified that the subject was the one receiving the key. Without expiration dates, I only need to control the domain for a short period of time to get a certificate that says I am that domain forever.