Control ID: CA-OPS-002
Control Name: CA Certificate Expiration Validation
Severity: High
Status: Success
Certificate Authority: securetron-lab-ISSUINGCA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0198880

Expected Result:
CA certificates should meet configured expiration limits

Evidence:
CA Certificate Details:
  Subject: CN=securetron-lab-ISSUINGCA, DC=securetron-lab, DC=local
  Issuer: CN=Securetron-Lab-ROOT-CA, DC=securetron-lab, DC=local
  Thumbprint: 8CD75D1E83D24DFDF3C5E4453650AF3E0676A162
  Valid From: 2025-09-21
  Valid To: 2027-09-21
  CA Type: Subordinate CA
  Certificate Source: Active Directory

Validity Analysis:
  Total Lifespan: 2.00 years
  Remaining Validity: 1.93 years

Validation Rules (from parameters.json):
  Subordinate CA Max Limit: 5 years total lifespan
  Subordinate CA Min Limit: 1 years remaining validity

Individual Rule Validation:
  Max Limit (5 years): PASS
  Min Limit (1 years remaining): PASS
  Overall Compliance: COMPLIANT


Recommendation:
CA certificate meets all configured expiration limits for Subordinate CA.
