3 ms·
If you keep your CA secure, no reason that you can't set the expiration of the root cert to something like 10 years.
by zaarn 6y ago
If you keep your CA secure, no reason that you can't set the expiration of the root cert to something like 10 years.
- tsimionescu 6y agoWill browsers accept that?
- zaarn 6y agoBrowsers accept a root CA with long lifetime. Certs signed by CAs installed by the user or admin also allow long lifetimes (probably will still for a while).