Q: When is a validity period not a validity period?

A: When it’s a Certificate Authority after Windows 2000.   Back Story… Those helpful chaps over at the Windows PKI Blog provided a script (setupca.vbs) to install a Certificate Authority on Windows Server 2008 and R2, and recently we had a request to be able to specify the expiration date of the CA’s own certificate…

3