3 ms·
I know very little about certificates and online security, but I'm also kind of baffled by the expiration time of the iniLINE certificate (2018-10-10 to 2099-12
by dada78641 4y ago
I know very little about certificates and online security, but I'm also kind of baffled by the expiration time of the iniLINE certificate (2018-10-10 to 2099-12-31). I feel that's also a poor practice, right? What should a regular expiration time be for a proper root certificate?
- palant 4y agoMicrosoft specifically requires that root certificates have an expiration time no longer than 25 years. See here: https://learn.microsoft.com/en-us/previous-versions//cc751157(v=technet.10)#a-root-requirements https://learn.microsoft.com/en-us/previous-versions//cc75115...
- michaelt 4y agoThat's actually kinda normal. There's no authority above root certificates,* able to sign new certificates - that's what it means to be a root certificate. So root certificates will often have super long durations. For example, the certificate HN uses is signed by "DigiCert Global Root CA" - valid from 2006 to 2031. * Unless you count the power of OSes/browsers to push updates with new certificates.