4 ms·
Sounds like one of those tricky technicalities For fun, I thought of a bad edge case: you create a certificate exactly 90 days before the end of the year (havi
by raverbashing 5y ago
Sounds like one of those tricky technicalities
For fun, I thought of a bad edge case: you create a certificate exactly 90 days before the end of the year (having your notAfter date of 2022-01-01-00:00:00Z) BUT you get a leap second on this year. Then it will last for 90 days + 1 second
- justin_oaks 5y agoWhich makes me wonder if other certificate authorities handle this scenario.
- thehappypm 5y agoThey actually mentioned that they use 90 days as defined by 2160 hours, so that would be a non-issue.
- varajelle 5y agoIt depends if the certificate itself contains an absolute timestamp for the expiration time, or a validity period.
- wiml 5y agoCertificates contain a pair of absolute times in a Gregorian representation. The ASN.1 time format does support leap seconds (in the usual way, e.g., a time of 23:59:60) but I don't know if X.500 or PKIX restricts that.