• slazer2au@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    19 hours ago

    Recently learned that root CA don’t actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

    • SteveTech@aussie.zone
      link
      fedilink
      arrow-up
      8
      ·
      18 hours ago

      Well you can’t sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn’t strictly invalidate the already signed certs.

      But I was more talking about the end-user certificates in the previous comment.