How do I get a certificate for greater than 3 months ? Happy to pay. Info is not easily found @ letsEncrypt.org ! Can the powers that be direct me to where I can find such info ?! ( Shut up and take my money :rofl::heart_eyes:)

You can't, not from Let's Encrypt. Other CAs will be happy to sell you one, though :smiley:

[image] joe-oli: Info is not easily found @ letsEncrypt.org ! It's in the FAQ: FAQ - Let's Encrypt

You can get one from BuyPass Go for 180 days but everyone else (running free ACME services) is 90 days. It also raises the question of why you want a long lived certificate? You should/must automate certificates used for production systems, so the lifecycle of the individual certificate shouldn't m…

[image] webprofusion: You should/must automate certificates used for production systems, so the lifecycle of the individual certificate shouldn't matter. This. Up until recently the maximum and minimum certificate lifetime was 90 days. Now there's a CA that allows you to ask for shorter lif…

[image] Giuseppe C.: tell us your needs Nothing fancy, in the same way I can get a 1 yr or 2 yr certificate from Digicert, that's what I am looking for; just want to install it on IIS (Windows WebServer) and be done with it for the year (or 2 years) - I don't know why everyone keeps saying "y…

At the risk of (more) self promotion, have you tried https://certifytheweb.com - it'll do what you want with IIS but using 90 day certs that are auto renewed (other ACME clients are available). You can indeed get 1 yr (or greater) certs via DigiCert, SSL.com etc but they are generally manually inst…

[image] joe-oli: Go and look at microsoft.com , or ibm.com , or redhat.com , the cert is for a full 1 year :stuck_out_tongue_winking_eye: And Google uses a cert valid for less than 3 months, so what's your point? Exactly, what others do is not a very good argument if you'd ask me. [image] jo…

[image] joe-oli: Go and look at microsoft.com , or ibm.com , or redhat.com , the cert is for a full 1 year :stuck_out_tongue_winking_eye: Have you seen google.com ? facebook.com ? mozilla.org ? :smiley: You know they make browsers and serve the biggest websites of the internet, right?

[image] joe-oli: I can get a 1 yr or 2 yr certificate from ... You actually can't get certificates for 2 years anymore; the general limit from any CA right now is currently 398 days (just over 1 year 1 month).

Correct. The CA/Browser Forum Baseline Requirements Documents (SSL/TLS Server Certificates) Is clearly stated in 6.3.2 Certificate operational periods and key pair usage periods https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.8.4.pdf [image]

Cert from LetsEncrypt for greater than 3 months?

Help

joe-oli May 9, 2022, 7:52am 8

Yeah ok thanks, I'll take a look at your suggested CA.
[EDIT: Ok, you are not a CA, you are selling an automation tool. All the best, but I'll do it manually]

Topic		Replies	Views
Can i get certificate to more than 3 months Help	3	9603	August 28, 2018
Certificate for 1 year Help	3	766	December 20, 2024
SSL certificate validity more time required, more than 90 days Feature Requests	9	16585	July 28, 2021
Pros and cons of 90-day certificate lifetimes Issuance Policy	452	99429	October 23, 2018
The 90 day issuance policy Issuance Policy	3	1108	June 3, 2018

Cert from LetsEncrypt for greater than 3 months?

Related topics