logoalt Hacker News

Y-bar04/02/20253 repliesview on HN

How will this impact self-signed local certificates? Can we still use a five-year lifespan on those or do we need to reduce it to <398 days?


Replies

electroly04/02/2025

Your local certificates are not bound by the Baseline Requirements at all; they're irrelevant to you. You can do whatever you want if your CA is not in a root program.

bawolff04/02/2025

The article doesn't even mention cert lifetimes.

But the answer is no, self-signed certs dont have to folllw c/ab.

show 1 reply