[cabfpub] Pre-Ballot - Short-Life Certificates
gerv at mozilla.org
Fri Oct 24 06:13:45 MST 2014
On 24/10/14 14:04, Bruce Morton wrote:
> I'm not sure how to create the certificate within 1 hour of the
> notBefore and also have the certificate valid for 24.5 hours before
> the issuance time.
Yeah, sorry, you are quite right. This is a mistake.
> My thinking is the CA would issue a certificate NOW with a notBefore
> of 24.5 hours earlier than NOW and a notAfter 48.5 hours later than
Right. That's what should happen. Please consider the draft updated to
say 25 hours instead of 1 hour.
More information about the Public