Closed mnordhoff closed 2 months ago
The Chrome Root Program Policy v1.5 has limited roots in their program to a maximum lifetime of 15 years from generation, which is the source these shorter validity periods.
OhhhhhhhhHHHHHHHhh. So I was missing something! :-) Sorry.
It says "As such, the end-of-validity dates given below are approximate, based on current Root Program policies." but I didn't make the connection.
Unless I'm missing something, ISRG Root X1 was exactly 5 years off, and ISRG Root X2 was 5 years and 13 days off.
See e.g. https://crt.sh/?id=9314791 and https://crt.sh/?id=3335562555, or other certificate examination tools.
(I absolutely did not test if this builds.)