6 ms·
> This step was announced some time ago, and since certificates usually need to be replaced frequently Most people will buy certs valid for a few years, or aro
by josteink 12y ago
> This step was announced some time ago, and since certificates usually need to be replaced frequently
Most people will buy certs valid for a few years, or around a couple of dozen Chrome-releases, and forget about them until they expire.
From my experience, among the things deployed in the world of IT, I would argue they are among the things replaced most infrequently.
So I'm curious... What makes you say certificates needs to be replaced frequently? What's the use-cases you are referring to?
- helyka 12y agoThat being said. How can I check our cert? The current cert predates my employment with the county and this is something I have never had to deal with.
- grhino 12y agoIf you view your website in chrome, you can click on the lock icon in the address bar. Go to the connection tab -> Click certificate information -> Details Tab. You should see one of the entries should be signature algorithm. SHA-1 is a problem. SHA-224 or higher means the cert is on SHA-2 which is okay.
- jamies888888 12y agoThis is a quick check site I've used previously: https://shaaaaaaaaaaaaa.com/ https://shaaaaaaaaaaaaa.com/ However the proper test should be done using https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/
- marcosdumay 12y agoIf you are in Firefox, you can also click the padlock icon, and click on the more information button.
- smackfu 12y agoYeah, *.ycombinator.com is using a 5-year certificate which was issued in 2014.