> On Jan 11, 2018, at 2:56 PM, James Burton via Public <public@cabforum.org> > wrote: > > Shouldn't we start restricting the certificate lifetime to domain > registration period if the certificate expiry date is greater than domain > registration period?
Sometimes the domain registration will be extended close to its expiry, a few weeks before or even exactly on the expiry date—for example, with most kinds of autorenewal system. That won’t give enough time to obtain, install, and test a replacement certificate.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Public mailing list Public@cabforum.org https://cabforum.org/mailman/listinfo/public