how to extend the term of CA validity?
Author: Wang-KaiCreated Dec 7, 2022Updated Sep 19, 2025
I generated my self-signed CA by cfssl gencert -initca, but the default term of validity is 5 years. How can I modify it to 10 years ? I don’t want to recreate a new CA, because it has signed a lot of sub CAs.
Anyone can help me ? Thanks so much .
Source: cloudflare/cfssl