7 ms·
If you get a 1 year certificate then yeah, but otherwise no. The requirement to re-validate the DNS record comes not from the CA or the use of ACME, but the Bas
by Scott_Helme_ 5y ago
If you get a 1 year certificate then yeah, but otherwise no. The requirement to re-validate the DNS record comes not from the CA or the use of ACME, but the Baseline Requirements[1] §4.2.1, to prove you are still in control of the domain on a somewhat regular basis to obtain new certificates. Every 3 months is more frequent than is required, but there is still a regular (398 day) DCV requirement.
[1] https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-1.7.9.pdf https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-...