Hi Jaime,

Thanks for the help, i will start a new CA as soon as posible. How
long expiration time should be ok for a corporate ca cert, 20 or 30
years?

Seems that verisign and entrust use 20 or 30 years for their ca certs.

Thats right, but most security folks dont like such long times - I suggest 8 years - so if you issue 2 year-valid enduser certs you have 6 years "usage" time

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature



Reply via email to