Stupid question around the issuing CA lifetimes for 6-day certs

Ok, I guess that makes sense.

However it was also suggested in that same thread:

From which I assumed they would be extending the initial sets of 2 issuing certificates to 4.
But just switching the pairs makes sense as well.

@mcpherrinm can you confirm that is indeed the plan?

Btw, and also:

Perhaps this changed with OCSP being taken out of the equation.

3 Likes