certlint

certlint copied to clipboard

Ballot 193 defines 825 day limit for all cert types

3

https://cabforum.org/2017/03/17/ballot-193-825-day-certificate-lifetimes/

cardonator

Publicsuffix check alerts on wildcards with base domains in the "private domains" section

1

Per the BRs, when checking for "registry-controlled" suffixes, "a CA SHOULD consult the 'ICANN DOMAINS' section only." However, certlint currently consults both the "ICANN DOMAINS" section and the "PRIVATE DOMAINS"...

jsha