logoalt Hacker News

mcpherrinmtoday at 5:57 AM0 repliesview on HN

If a key is breached, the certificate can be revoked, but that revocation goes away once the certificate is expired.

Expiry is a pretty fundamental part of the security model of certificates.