The renewal failed a month before anyone noticed
A field guide to the machine credential lifecycle, built from ten published incidents at Bazel, DigiCert, Microsoft, Let's Encrypt and Ericsson, the ballots and RFCs cutting public certificate lifetimes to 47 …
What surprised meCertificate lifetime is not the number that governs this failure. The number that governs it is the slack, the count of consecutive silent renewal fa…