From 816ad7aa79cbfc1315561590d89ed7a9fd076b97 Mon Sep 17 00:00:00 2001 From: Corey Bonnell Date: Tue, 5 Apr 2022 11:17:28 -0400 Subject: [PATCH] Mandate +/- signing time for notBefore --- docs/BR.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/BR.md b/docs/BR.md index 6036504d..81124af3 100644 --- a/docs/BR.md +++ b/docs/BR.md @@ -2104,7 +2104,7 @@ CAs SHALL NOT include additional names unless the CA is aware of a reason for in | \ \ \ \ `signature` | See [Section 7.1.3.2](#7132-signature-algorithmidentifier) | | \ \ \ \ `issuer` | MUST be byte-for-byte identical to the `subject` field of the Issuing CA. See [Section 7.1.4.1](#7141-name-encoding) | | \ \ \ \ `validity` | | -| \ \ \ \ \ \ \ \ `notBefore` | __**TBD**__ | +| \ \ \ \ \ \ \ \ `notBefore` | A value within 48 hours of the certificate signing operation. | | \ \ \ \ \ \ \ \ `notAfter` | See [Section 6.3.2](#632-certificate-operational-periods-and-key-pair-usage-periods) | | \ \ \ \ `subject` | See [Section 7.1.2.6.1](#71261-subscriber-certificate-types) | | \ \ \ \ `subjectPublicKeyInfo` | See [Section 7.1.3.1](#7131-subjectpublickeyinfo) |