How to Extend Certificate Validity Period on Windows Certificate Authority

1. Open regedit on your enterprise CA server

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertSvc\Configuration\<CAName>

2. In the right pane, double-click ValidityPeriod

3. In the Value data box, type one of the following, and then click OK:

• Days
• Weeks
• Months
• Years

4. In the right pane, double-click ValidityPeriodUnits and fill the length you required (e.g 2 for 2 years)

5. Stop and Start the service from cmd

net stop certsvc net start certsvc