At Thu, 19 Apr 2007 21:46:50 +0200, Róbert Kisteleki wrote:
Ahh, so you have not really answered the question :-) Well, based on your
approach, there's no good answer, as it can be:
1. June + grace period
2. next Jan + grace period
3. something else.
Neither of these "reflect the allocaton's contract period".
I'm not convinced that it needs to reflect the contract period,
although issuing a certificate significantly longer than any contract
period with that customer would be silly.
I view certificate expiration primarily as a mechanism for limiting
the length of the CRL.
