Block SSL certificates based on valid lifetime

[citkorohr]

Hi community,

is it possible to block SSL certificates which are valid for more than n-years?

Unfortunately I couldn't find anything suitable, yet.

Thank you very much.

[jacek · Accepted solution]

Yes and no.
If you want to block certificates, which are valid for more than X days, you can use property:
SSL.Server.Certificate.DaysExpired
So to check if a certificate is valid for more than 2 years, check if DaysExpired is less than -731 (we are checking days expired, so if a certificate is valid, value will be negative).
But if a certificate was issued 2 years ago and is valid for a 1 year more, you cannot detect it as far as I know.