Can we make certs not expire for 10 years?

Products

• CA Mediation Manager
• DX NetOps
• CA Performance Management - Usage and Administration
• CA Spectrum
• CA Virtual Network Assurance
• CA Network Flow Analysis (NetQos / NFA)

Issue/Introduction

Can we generate certificates that will not expire for the next 10 years?

Environment

All supported releases

Resolution

For all HTTPS certificates, the industry-standard expiration period is one year.  It is not recommended to go over 365 days, as many browsers and 3rd party applications are beginning to distrust certificates with lengthy validity periods.