I am wonder what will happen as a certificate template with a 2 years validity period (for example) will issue a certificate when the CA certificate expires in 1 year.  I can think of 2 things that could possible happen, but this is just guessing, thats why I would like to know. I think possibly the following will happen:   You can a notification of some sort. The issued certificate will get an expiration date of 1 year, not 2.   Can anyone tell me what will happen?
123214
In 2004, I set up a small certification authority using OpenSSL on Linux and the simple management scripts provided with OpenVPN. In accordance with the guides I found at the time, I set the validity period for the root CA certificate to 10 years. Since then, I have signed many certificates for OpenVPN tunnels, web sites and e-mail servers, all of which also have a validity period of 10 years (this may have been wrong, but I didn't know better at the time).  I have found many guides about setting up a CA, but only very little information about its management, and in particular, about what has to be done when the root CA certificate expires, which will happen some time in 2014. So I have the following questions:   Will the certificates that have a validity period extending after the expiry of the root CA certificate become invalid as soon as the latter expires, or will they continue to be valid (because they were signed during the validity period of the CA certificate)? What operations are needed to renew the root CA certificate and ensure a smooth transition over its expiry?   Can I somehow re-sign the current root CA certificate with a different validity period, and upload the newly-signed cert to clients so that client certificates remain valid? Or do I need to replace all client certificates with new ones signed by a new root CA certificate?  When should the root CA certificate be renewed? Close to expiry, or a reasonable time before expiry? If the renewal of the root CA certificate becomes a major piece of work, what can I do better now to ensure a smoother transition at the next renewal (short of setting the validity period to 100 years, of course)?   The situation is made slightly more complicated by the fact that my only access to some of the clients is through an OpenVPN tunnel that uses a certificate signed by the current CA certificate, so if I have to replace all client certs, I will need to copy the new files to the client, restart the tunnel, cross my fingers and hope that it comes up afterwards.
39522
I have heard that Google trust that website which has long expiry date. that want to know how can I register my domain for a long period.
16062
I want to purchase a few expired domains, who have some backlinks, but some of those sites have PR of -1 with backlinks which are pretty bad.  But what exactly do I need to look for when looking for an expired domain (and I don't want to pay up the nose for a PR3+ domain).
73615
When a question is migrated from another site, a stub is temporarily left on the original site before being automatically deleted after 30 days. (See )  While questions stubs are automatically deleted from the origin site after 30 days, questions that are nearly a decade old will prominently display their migration status.   Migration notice for   I can't think of any reason a 7-8 year old migration notice would be helpful for the average user, or why it should displayed before protected notices.  If a user does want to see if a question was migrated, they can check a question's , or search .
2118
According to the answer to this question: "", I should hold onto my taxes and supporting documents for 7 years.  Is this the right length of time?  Unfortunately, my taxes tend to be complicated, and 7 years worth of tax returns are a bit of a burden. Is the basis for this number due to statute of limitations or something else?
44169
I have just received my J-1 visa (short-term scholar). On the visa it says "Expiry date: 14 November". My flight back is on the 20th of November. Do I understand correctly that even though the visa expires on the 14th, I get additional 30 days to leave the country? Thanks in advance for your answers.
77279
My NICOP is expired and I have already booked a flight to Pakistan via Qatar Airways. My wife has a valid NICOP card but my 5 years old child  has never had a NICOP or any other Pakistani ID card other than the British passport. I have made an appointment for next Monday to renew my NICOP and apply for my child's new NICOP card. My question is, what if the cards of my child and mine don't arrive in time, can we still travel to Pakistan, given that we have the receipts as a proof of application?
60910
I applied for an H1B visa and it's been approved. I'm waiting for an appointment. But my passport will expire in 12-13 months. If I apply for a new passport now, and appear for visa stamping with the old and new passport, will there be any issue?   All the visa processing activities were done with my old passport.
13540
I have read many places that the access token session length is controlled by the client application and will expire "from time to time", but I cannot find a way for my application to calculate the expiration date/time.  I have used other non-Salesforce systems and they pass along an expires_in value to help determine the expiration.  Salesforce does pass along an issued_at value, which doesn't help me much.  Is there a way to determine when the access token will expire, or is it only based on trial and error?
109509
I've generated a self signed certificate using openssl - it's entirely self signed and not signed by a self signed CA. I've imported it successfully into the nss database for use by browsers. I now want to trust it globally, so that tools like wget, curl etc... don't nag.  As per instructions elsewhere, I copied my certificate to /etc/pki/ca-trust/source/anchors/ and then ran "update-ca-trust extract". Unfortunately this seems to only work on CA certificates and not on single certificates. How can I achieve what I'm after? I know I can generate a self signed CA and sign my certificate with that, but I have reasons for not doing this.  I generated my certificate like this:  openssl genrsa -out server.key 4096 openssl req -new -key server.key -out server.crt openssl x509 -sha256 -req -extensions v3_req -days 3650 -in server.csr -signkey server.key -out server.crt -extfile /etc/pki/tls/openssl.cnf   Any help would be greatly appreciated!
88910
The date in my UK passport isn't in the usual format (day, month, year) it shows as-  Date off issue 20 DEC /DEC 10 Date of expiration 20 DEC /DEC 20  bit confusing but I'm guessing it means it expires in Dec 2020..can anyone confirm this?
112648
I am planning a winter vacation in Iceland around the dates of Dec 21st, 2017 to Jan 1st, 2018. I am currently on H1B visa in the USA, and my visa expires on Feb 7, 2018. My employer has applied for the H1B visa extension.   Although my visa is valid until Feb 2018, it does not satisfy the 90-day validity after the departure from Schengen countries. In that case, can I show the H1B extension receipt as a proof of document?
69217
I just received an email informing that the default Salesforce client certificate (proxy.salesforce.com) will retire on August 7, 2017 at 09:30 a.m. PDT (16:30 UTC).  They say customers using the following features may be impacted:   Single Sign-On using Service Provider (SP)-Initiated SAML Delegated authentication Workflow automated messaging AJAX proxy PageReference.getContent() Apex call PageReference.getContentAsPDF() Apex call   As an administrator and developer who has an app that uses getContentAsPDF calling a page within the organization (getting the pdf of a visualforce rendered as PDF), should I be concerned about the highlighted feature?
119879
Can I get a certificate from a root CA that I can then use to sign my own web server certificates? I would, if possible, use a signed certificate as an intermediate to sign other certs.  I know that I would have to configure my systems in a certain way with "my" intermediate certificate in order to supply information about the chain of trust to my clients.   Is this possible? Are root CAs willing to sign a certificate like this? Is it expensive?  BACKGROUND  I'm familiar with the basics of SSL as it pertains to securing web traffic over HTTP. I also have a basic understanding of the way the chain of trust works, in that web traffic is secured "by default" if you encrypt with a certificate that has a valid chain all the way back to a root CA, as determined by the browser/OS vendor.  I am also aware that many of the root CAs have begun signing certificates for end users (like me) with intermediate certificates. That may require a bit more setup on my end, but otherwise, those certificates will work fine. I guess this has to do with protecting their all-valuable private key for the CA and the disaster that it would be if i were ever compromised.  EXAMPLES        Now, we are definitely not the size of any of those organizations, but they seem to be doing something like this. It would definitely make the management of these certificates a lot more palatable, especially considering one way we are expanding the reach of our e-commerce platform.
96173
Can you get an Extended Validation SSL certificate that applies to unlimited subdomains?  Does it make technical sense?  I'm using Digicert and they said that it wasn't possible to offer such a product.
38298
Can anyone answer to the following questions:   What is static approval process What are the limitations of static approval process Purpose of Dynamic approval process Differences between static and dynamic approval processes.   Thanks in advance.
28631
If your visa is on an expired passport but still valid, can you still use it with your new passport, or does the old passport have to have a recent expiration date? If so, how do you transfer your visa to your new passport?