Net::err_cert_validity_too_long

“Starting on September 1st (2020), SSL/TLS certificates cannot be issued for longer than 13 months (397 days).”

Maybe univention-certificate shown thrown a warning if -days specifies more than 397 days?

Mastodon