[sillysaurusx]

http://paulgraham.com actually fails if you try to access it via HTTPS. Maybe that's one way to get around the problem.

Is there really no way to date a cert for a century?

[banana_giraffe]

Nope, they top out at 398 days. I think there's even been some talk about limiting them to 90 days.

[hotpotamus]

Is there an actual RFC for that? I was thinking it was just browsers (Google really) who enforced it by convention.

[banana_giraffe]

As I understand it, it is just browsers enforcing it, with Safari [1] doing so first, then Chromium [2] doing the same, both doing so in 2020.

[1] https://support.apple.com/en-us/102028

[2] https://chromium.googlesource.com/chromium/src/+/master/net/...