topic Re: CSR Certificate for Mail in Web Security

CSR Certificate for Mail

sv7 — Wed, 22 Dec 2021 07:47:50 GMT

Hi All,

Created a CSR certificate for mail domain by following below article

https://www.secure128.com/guides/ciscoIronCSR.

During creation of csr certificate i have kept the duration before expiration is 3650 days But my client inform me that their CA Authority will provide them 365 days of validity only. So would need to regenerate the certificate from WSA or it works instead i have created 3650 days of csr to get signed from My CA authority.

Re: CSR Certificate for Mail

sv7 — Wed, 22 Dec 2021 17:36:56 GMT

Any help please

Re: CSR Certificate for Mail

Ken Stieers — Wed, 22 Dec 2021 19:16:08 GMT

In general, the public CAs will only issue a cert for whatever time frame you bought, no matter what the CSR says. These days, that means ~1 year, because the browser makers forced the issue.
Can you clarify what this cert is going to be used for? You posted in Web Security, which usually means the WSA... but you mention mail... is this for ESAs?

Re: CSR Certificate for Mail

sv7 — Thu, 23 Dec 2021 14:16:13 GMT

Hi Ken,

Thanks for your reply and clearing my doubt regarding expiration days. Cert is going to used and upload in WSA only but it is going to used for client email.