Why my LE cert notbefore date one hour before i apply to issue


#1

https://crt.sh/?id=432077073
I use acme.sh to apply for this cert at May 1 0:13 (GMT +8) but it notbefore date is Apr 30 15:13:10 2018 GMT
(equal to Apr 30 23:13:10 GMT +8)
SCT timestamp is also 2018-04-30 16:13:10 UTC so not my computer time wronged.
so i want to know that why it is before 1 hour.I am not a American so i guess may DST cause that?


#2

Let’s Encrypt certificates are intentionally backdated by 1 hour.


#3

… to avoid issues with clock skew.


#4

So is the real cert life then only 89 days and 23 hours? - LOL


#5

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.