Recently two different corporations asked me about rotating X.509 certificates every three months. One was told to do so by an external auditor. The other was told by their CA that is the new standard. Has anyone heard the CAs are mandating rotation every three months? Is there an underlying advisory?
Thank you for your consideration.
Cheers,
alex.
------------------------------
Alex Sharpe
Principal
Sharpe42
[email protected]Co-Chair Philosophy & Guiding Principles Working Group
Co-Chair Organizational Strategy & Governance Working Group
------------------------------