[cabfpub] Restrict certificate lifetime to domain registration period (if certificate expiry date is greater than domain registration)

[Geoff Keating]

> On Jan 11, 2018, at 2:56 PM, James Burton via Public <public at cabforum.org> wrote:
> 
> Shouldn't we start restricting the certificate lifetime to domain registration period if the certificate expiry date is greater than domain registration period?

Sometimes the domain registration will be extended close to its expiry, a few weeks before or even exactly on the expiry date—for example, with most kinds of autorenewal system.  That won’t give enough time to obtain, install, and test a replacement certificate.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3321 bytes
Desc: not available
URL: <http://cabforum.org/pipermail/public/attachments/20180112/02a40728/attachment.p7s>