FAQ¶
Our FAQ provides information regarding issues related to TrustView, SSL certificates and other topics.
Tip
If you have a question not answered here, contact our and we may add it to the FAQ.
Certificates ordered with a CSR does not include a private key¶
When ordering a certificate from TrustView using a CSR (Certificate Signing Request), the certificate will never include a private key. This is because when using the other method (by not using a CSR) TrustView will generate the private key for the certificate you are ordering and store it encrypted in the TrustView database. A private key can still be imported for the certificate at a later time if you provide one. This can be done from the detail page of the certificate inside TrustView.
Once the private key has been either created for the certificate by TrustView or provided by importing it at a later time, the certificate can be exported with or without the private key.
Tip
A private key can be generated for a certificate in several ways. An example could be by using OpenSSL.
How to revoke certificates¶
Currently, it is possible to revoke Let's Encrypt
and ADCS
issued certificates directly from TrustView, by
going to the details page of the specific certificate and press Revoke certificate
.
You will be prompted to confirm whether you want the certificate revoked or not.
Danger
Once a certificate is revoked, it cannot be undone.
Certificate validity period (1 year)¶
Because of industry changes, we only offer certificates of a 1-year validity period, when ordering external certificates through TrustView.
“Subscriber Certificates issued on or after 1 September 2020 SHOULD NOT have a Validity Period greater than 397 days and MUST NOT have a Validity Period greater than 398 days. Subscriber Certificates issued after 1 March 2018, but prior to 1 September 2020, MUST NOT have a Validity Period greater than 825 days. Subscriber Certificates issued after 1 July 2016 but prior to 1 March 2018 MUST NOT have a Validity Period greater than 39 months.
For the purpose of calculations, a day is measured as 86,400 seconds. Any amount of time greater than this, including fractional seconds and/or leap seconds, shall represent an additional day. For this reason, Subscriber Certificates SHOULD NOT be issued for the maximum permissible time by default, in order to account for such adjustments.”
– CAB Forum section 6.3.2 CAB Forum