In order to create a certificate that is valid for longer than the default validity period defined in the Windows Server CA templates, there are three things which determine the validity period: The remaining lifetime of the issuing CA server The value specified in the certificate template The value specified in the CA server registry The validity period of the certificate will be determined by the shortest value of the three … :) Determining the lifetime for a CA server The default Validity period...