CSR Certificate for Mail

[sv7]

Hi All,

Created a CSR certificate for mail domain by following below article

https://www.secure128.com/guides/ciscoIronCSR.

During creation of csr certificate i have kept the duration before expiration is 3650 days But my client inform me that their CA Authority will provide them 365 days of validity only. So would need to regenerate the certificate from WSA or it works instead i have created 3650 days of csr to get signed from My CA authority.

[sv7]

Any help please

[Ken Stieers]

In general, the public CAs will only issue a cert for whatever time frame you bought, no matter what the CSR says. These days, that means ~1 year, because the browser makers forced the issue.
Can you clarify what this cert is going to be used for? You posted in Web Security, which usually means the WSA... but you mention mail... is this for ESAs?

[sv7]

Hi Ken,

Thanks for your reply and clearing my doubt regarding expiration days. Cert is going to used and upload in WSA only but it is going to used for client email.