westurner
9 months ago
Letsencrypt wildcard certs are valid for 30 days, and regular certs are valid for 90 days but they recommend renewing them after 60 days.
Cert validity intervals directly affect the storage and bandwidth requirements for CT logs, which should be replicated.
Does anyone serve the CT Certificate Transparency logs for checking by browsers?