Hacker News new | past | comments | ask | show | jobs | submit login

CAs simply never sign a cert with an expiry longer than their own root cert.

Thus, by the time the root cert expires, all client certs will already be expired.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: