you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 week ago* (2 children)

Recently learned that root CA don't actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 16 points 1 week ago

    Well you can't sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn't strictly invalidate the already signed certs.

    But I was more talking about the end-user certificates in the previous comment.

  • source
  • parent