Home/ Questions/Q 8728251
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-13T08:35:34+00:00

I am developing a software which imports ssl certificates. When the expiration date has

  • 0

I am developing a software which imports ssl certificates. When the expiration date has past, my software accuses this certificate as invalid. But, let’s suppose I have a certificate that is valid notBefore 2015 and we’re in 2012. What should my software report? Should I accept it? I searched a lot for a standard or a recommendation, but I found nothing.

I know that it is unlikely to happen, but I want to know what to do.

It may seem obvious, but what if we’re in 2012, the certificate is valid notBefore 2011 but for some reason my machine is setted with a date like 1970. All the SSL services would stop working.

So, what do you think?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Reject it. It isn’t valid yet. There has probably been a mistake in the issuing/signing process but that’s not your problem. The certificate says itself that it isn’t valid yet, so it isn’t valid yet.

    • 0