you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 3 hours ago* (1 child)

Recently learned that root CA don't actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 2 hours ago

    Well you can't sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn't strictly invalidate the already signed certs.

    But I was more talking about the end-user certificates in the previous comment.

  • source
  • parent