Control ID: CA-OPS-002
Control Name: CA Certificate Expiration Validation
Severity: High
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:42:49
Duration: 00:00:00.3109898

Expected Result:
CA certificates should meet configured expiration limits

Evidence:
CA Certificate Details:
  Subject: CN=Securetron-Lab-ROOT-CA, DC=securetron-lab, DC=local
  Issuer: CN=Securetron-Lab-ROOT-CA, DC=securetron-lab, DC=local
  Thumbprint: D227EAC507616D5A948EB059765EAC07AF9E653B
  Valid From: 2025-09-20
  Valid To: 2045-09-20
  CA Type: Root CA
  Certificate Source: Active Directory

Validity Analysis:
  Total Lifespan: 20.00 years
  Remaining Validity: 19.93 years

Validation Rules (from parameters.json):
  Root CA Max Limit: 10 years total lifespan
  Root CA Min Limit: 3 years remaining validity

Individual Rule Validation:
  Max Limit (10 years): FAIL
  Min Limit (3 years remaining): PASS
  Overall Compliance: NON-COMPLIANT


Recommendation:
Reissue CA certificate: Total lifespan exceeds 10 years.
