Certificate Lifecycle Service · View 14 of 21 · Runtime
The finding
- Public and private trust share a registry, an escalation ladder and a verify step. They share no protocol, no authority, no validation mechanism and no lifetime.
- That is the whole argument for one control plane rather than two: the shared value is the inventory and the escalation, not the issuance mechanics.
Lifetimes
- Public: 90 days, renewed at 30 days remaining, bounded by what public CAs will issue.
- Private: 24 hours, renewed at 8 hours remaining, bounded by what the platform can afford to sign — 46,000 issuances a day at the assumed estate size.
- Authorities: rotated at half of remaining life, never at the end, and tracked on the same clock as a leaf.
Risk
- Shortening the private leaf multiplies issuance volume proportionally and shortens the estate's survival time without the control plane in the same stroke. The two numbers are the same decision.
