Skip to main content

All Questions

Filter by
Sorted by
Tagged with
3 votes
1 answer
3k views

How does the SSL/TLS protocol determine if a certificate is expired or not?

I already tried googling but no luck. All search results always tell you how to check cert expiration manually, but that is not my question. Yes I can use OpenSSL for example, but what I am asking is ...
Noob_Guy's user avatar
  • 139
3 votes
1 answer
1k views

Why does Windows consider a certificate valid even after its expiration time?

I downloaded Google's Cloud SDK installer today, and upon checking the certificate to validate it, I noticed something strange: the expiration date of the certificate appears to be December 22nd 2019 -...
Opalium's user avatar
  • 33
1 vote
1 answer
3k views

Request certificate expiration date in CSR

I want to see how my application will behave in case if the SSL certificate expires. CSR are signed by CA, so they are not self-signed and the validity period is 2 years. For my test I want to set ...
Alex's user avatar
  • 422
1 vote
0 answers
118 views

How does PGP web of trust handle certificate expiration?

I have certificate that expires in two years. I'll probably try to participate in key signing party so I get to know what it actually looks like. What happens in two years? When my certificate ...
SoptikHa's user avatar
  • 111
5 votes
3 answers
604 views

How do short lived certificates increase security?

After reading a blog post about the new Roughtime protocol, I am not convinced of the original premise that shorter certificate lifetimes increase security. The claim is that a shorter time somehow ...
John Deters's user avatar
  • 34.7k
3 votes
2 answers
3k views

How can an expired SSL certificate make the server and/or client vulnerable to MITM attacks? [duplicate]

When I see the warning on my browser about "Invalid Certificate" or "Untrusted Certificate" , I might have doubt about a MITM attack at my network. Should I have the same concern when I see that the ...
Pilfility's user avatar
  • 507