Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have in /etc/httpd/ssl subdir two files: apache.crt and apache.key. How can I extend time of validity of APACHE http server, without creating new certificate and without necessity of interaction from client site? It is important for me because current cert is valid only 30 days and I want to extend to 1 year.

share|improve this question
up vote 3 down vote accepted

You can't.

The validity time is encoded into the certificate. The only way to extend it is to contact the issuer of the certificate and get a new one.

If you don't want to replace the key, you can sign the new request with the same key as the old one. But you still need to replace the actual apache.crt with the new one.

share|improve this answer
But it is self signed cert, generated during ordinary installation of Apache from ready RPM. So what can I do now to generate new one apache.crt with 1 year validity? – mackowiakp Mar 25 '14 at 14:58
You generate a new self-signed cert in the same way that you generated the previous one. – Jenny D Mar 25 '14 at 14:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.