The certificate is valid longer than public TLS certificates may be.

CERT_LONG_VALIDITY · Severity: Info

• InfoCERT_LONG_VALIDITY

  The certificate is valid longer than public TLS certificates may be.

  The CA/Browser Forum Baseline Requirements limit publicly trusted TLS server certificates to 398 days, to 200 days from 15 March 2026, 100 days from 15 March 2027 and 47 days from 15 March 2029 (by issue date). A longer certificate is fine for a private CA, but browsers reject it from a public one.

Reported by

• PEM certificate decoder

Available through the API

• PEM certificate decoder API

Related findings

• Error CERT_EXPIRED The pasted certificate has expired.
• Warning CERT_EXPIRING_SOON The pasted certificate expires within 30 days.
• Error CERT_NOT_YET_VALID The pasted certificate is not valid yet.
• Warning CERT_NO_SAN The certificate names no host in its subject alternative names.
• Info CERT_SELF_SIGNED The pasted certificate is self-signed.

All findings