I have a weird issue when creating and importing PFX files into Windows
7 clients. I have created a CA and a sub CA and I have created client
certificates. When I import them into Windows 7 clients (in all
fairness I have only tried windows 7), when I go to look at the
certification path, it tells me that the root CA certificate is expired
or not yet valid. Looking at the expiration date of the root CA, it
shows it to only be valid from 11/19/2012 through 12/19/2012. The sub CA
certificate and the end user certificates are fine with 5 year validity
periods. However, when I look at the root CA with openssl it shows the
following:
*#: openssl x509 -in cacert.pem -noout -text
Issuer: CN=ca3.deeztek.com/emailAddress=c...@deeztek.com
Validity
Not Before: Dec 20 21:00:07 2012 GMT
Not After : Dec 19 21:00:07 2017 GMT
Subject: CN=ca3.deeztek.com/emailAddress=c...@deeztek.com*
Obviously not expired and the dates are completely different from what
Windows is reporting. Can anyone shed some light on this. I sign the
client certificates with the sub CA using a cachain file I created from
the root and the sub ca.
Thanks
smime.p7s
Description: S/MIME Cryptographic Signature