From the course: SSL Certificates for Web Developers
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Expiration dates
From the course: SSL Certificates for Web Developers
Expiration dates
- [Instructor] In this chapter, we'll discuss managing certificates over time. We'll begin by discussing their expiration dates. All SSL certificates have an expiration date. This is a security feature. SSL certificates convey trust by certifying the owner of a public key. Expiration dates ensure that we renew that trust periodically. The owner and the domain name will be revalidated to ensure that the details are all current. It also provides an opportunity to update the cryptographic keys. You can use the same public key to renew the certificate, but rotating to a newly generated set of keys helps to limit the harm if those old keys were ever inadvertently leaked to someone. A certificate renewal is also an opportunity to implement current best security practices, such as an improved encryption algorithm or keys with longer lengths. Once a certificate reaches its expiration date, it's no longer valid and browsers will display security warnings when users try to visit the site just…