Shib v3 x509 certificate

[Ramaiah, Vanna G.]

I am working on installing Idp 3 and have questions on what type of x.509 certificates to be used.
Can we have self-signed X.509 certificates(10 yr validity) for Shibboleth Idp or should that be registered (2 yr)? I am afraid that if I  roll-out 2 year validity certificate, I need to work with SPs to get the certificate changed every 2 years.
Also, what do the SPs/ Incommon usually trust in general?









-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180702/480b4d75/attachment.html>