Validity is a bounded interval
04A certificate’s notBefore and notAfter fields describe its validity period.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 4.1.2.5 ↗
RFC 5280 · § 4.1.2.5EXAMPLE
3 / 3
03
After notAfter
The certificate has expired.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The validity interval includes both endpoints.
- The validity interval includes both endpoints.
- Path validation checks validity at the validation time.
- A currently valid date does not prove the certificate is unrevoked or trusted.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy