Mastering Active Directory - Second Edition

The certificate validity period

Certificates are time-bound. Using certificate templates, we can specify the validity period of a certificate. It can be months or years. Before a certificate expires, it will need to be renewed (the certificate template will define how many days or weeks in advance it can be renewed). The expiry date of an issued certificate cannot be changed unless there is a renewal or reprocess.