Google Inc.

Benjamin Jackson Benoy

Matthew Robert Jones

John David Thayer Wood

A method for representing certificate expiration includes obtaining, from a root certificate authority, a root digital certificate and generating a chain of intermediate certificate authorities. Each intermediate certificate authority includes a respective intermediate certificate digitally signed by the intermediate certificate authority that is immediately higher in the chain and a respective validation time period indicating a range of times when the intermediate certificate authority is permitted to digitally sign certificates. The respective validation time period includes the validation time period of each intermediate certificate authority that is lower in the chain. The method includes generating a certificate revocation list and generating, from the lowest intermediate certificate authority in the chain, a plurality of end entity certificates. The method includes, after the respective validation time period of the lowest intermediate certificate authority in the chain has elapsed, adding, to the certificate revocation list, one or more of the plurality of end entity certificates.

Growing community of inventors

Redmond, WA, United States of America

Benjamin Jackson Benoy