Self-signed certificate that lasts 5 years
by Brian on Mar.02, 2022, under Computer Stuff, General Info, Windows Info
On modern Windows servers, you can create a self-signed certificate with powershell, using the new-selfsignedcertificate command. By default, this certificate will only last for 1 year before expiring. To create a certificate that lasts a little longer, fire up an admin powershell, and do this:
$fromtoday = get-date
$5years = $fromtoday.addyears(5)
new-selfsignedcertificate -dnsname mycertname.mydomainname.com -notafter $5years -certstorelocation cert:\localmachine\my
July 23rd, 2026 on 1:41 pm
Pretty sure I know who thumbed this one down… :)
Listen, I don’t fully explain everything I put here. Creating a self-signed cert that lasts 5 years is clearly not a good idea. I was only trying to show how easy it is to manipulate the expiration date of these, not suggest an insecure configuration.