• SteveTech@aussie.zone
      link
      fedilink
      arrow-up
      22
      ·
      2 days ago

      Yeah, my understanding was they’re not issuing new certificates, but the current ones are still valid until they’ve expired.

      • slazer2au@lemmy.world
        link
        fedilink
        English
        arrow-up
        11
        arrow-down
        1
        ·
        2 days ago

        Recently learned that root CA don’t actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

        • SteveTech@aussie.zone
          link
          fedilink
          arrow-up
          16
          ·
          2 days ago

          Well you can’t sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn’t strictly invalidate the already signed certs.

          But I was more talking about the end-user certificates in the previous comment.