Extended certificate still showing as expired.

My certificate expired so I extended it.

I try to sign/encrypt and the pop-up shows shows ‘Sign as’ with my name and a green tick.

‘Encrypt for me’ also shows my name but with a red cross ‘This certificate is expired’.
image

Hi Les,

that is a sign that you only extended the certificate of the primary key and not the encryption subkey. There was a bug in Kleopatra (before version Gpg4win 4.2) that only extended the primary if you extended the key after expiration in stead of before. So you have to go into the details of your key and extend the expiry date for that subkey explicitly.

If you need a detailed description for that check out the answer to “Encryption failed: unusable public key” in the FAQ here: FAQ for GnuPG VS-Desktop users

The screenshots are with German language settings but this should be no problem here.

Btw: with the current version Gpg4win 4.4 the subkey details are easier to access now and much better organizied.

1 Like