See title. Are there any sources where there are recommended validity times of certificates (based on length, algo, etc)?
I'm particularly interested in validity of RSA certificates...
There's some info in the Microsoft blog:
Edit :) ok, so let's try some more:
There is this recomendation from US government that says that shouldn't be longer than 3 years. And the validity period should be related to the interaction necessary to "renew" it: the more human interation is necessary, the longer the time, up to 3 years.
In Brazil, the recomendation is: source