How long do the Okta app public certificates last before they expire? Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmqhqay&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Angela CragheadAngela Craghead 

How long do the Okta app public certificates last before they expire?

I thought it was a long time (more than a few years), but I am unsure. 

Thanks!!
Gabriel SrokaGabriel Sroka (Okta, Inc.)
Hi Angela
It depends on when the certificate was created. Our older certs expire after 30 years. Our newer ones expire after 10 years (and that is customizable). See:
http://developer.okta.com/docs/api/resources/idps.html#generate-new-idp-signing-key-credential

You can download a cert and see what the expiration date is. Eg, Applications > Applications > Sign On > View Setup Instructions, copy the cert to a text file, save it with extension .cer (for Windows) and open it.