Hello

we have a problem with certificates used by some customers which are basically valid (certificate and sub CA) but have expired root-CA. We have deleted the expired root-CA some time ago and now all user certificates are invalid. Is it even PKI conform to have sub-CA and certificates with longer validity than the root-CA?

The problem CA is from https://www.trustcenter.de/infocenter/root_certificates.htm#1432

The sub-CA is for example https://www.trustcenter.de/infocenter/root_certificates.htm#2031

Many Thanks

Andreas


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Users mailing list
[email protected]
http://lists.djigzo.com/lists/listinfo/users

Reply via email to