[cabfpub] Pre-Ballot - Short-Life Certificates

Gervase Markham gerv at mozilla.org
Fri Oct 24 13:13:45 UTC 2014

On 24/10/14 14:04, Bruce Morton wrote:
> I'm not sure how to create the certificate within 1 hour of the
> notBefore and also have the certificate valid for 24.5 hours before
> the issuance time.

Yeah, sorry, you are quite right. This is a mistake.

> My thinking is the CA would issue a certificate NOW with a notBefore
> of 24.5 hours earlier than NOW and a notAfter 48.5 hours later than
> NOW.

Right. That's what should happen. Please consider the draft updated to
say 25 hours instead of 1 hour.


More information about the Public mailing list