[cabfpub] Pre-Ballot - Short-Life Certificates
Gervase Markham
gerv at mozilla.org
Fri Oct 24 13:13:45 UTC 2014
On 24/10/14 14:04, Bruce Morton wrote:
> I'm not sure how to create the certificate within 1 hour of the
> notBefore and also have the certificate valid for 24.5 hours before
> the issuance time.
Yeah, sorry, you are quite right. This is a mistake.
> My thinking is the CA would issue a certificate NOW with a notBefore
> of 24.5 hours earlier than NOW and a notAfter 48.5 hours later than
> NOW.
Right. That's what should happen. Please consider the draft updated to
say 25 hours instead of 1 hour.
Gerv
More information about the Public
mailing list