{"id":"ipsec-ca-valid-10-years-node-cert-5-years","text":"CNO generates a self-signed X.509 CA valid for 10 years; node certificates are valid for 5 years and auto-rotated after 4.5 years.","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-network_security-configur.md","source_url":"","source_hash":"bc9c4688581a35b8","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"ipsec-ca-valid-10-years-node-cert-5-years","truth_value":"IN","reason":"premise"}]}}