Security & Identity

Certificate Lifetime Calculator

Compare certificate validity dates with an explicit reference time.

Calculations run in your browser. The tool does not send your inputs to a server.

01Your inputs

Local workspace

Start with the sample below, or enter your own values.

Not before (ISO UTC)Use an explicit timezone, for example 2026-01-01T09:00:00Z (UTC). Time precision is milliseconds: use at most three fractional-second digits.

Not after (ISO UTC)Use an explicit timezone, for example 2026-01-01T09:00:00Z (UTC). Time precision is milliseconds: use at most three fractional-second digits.

Reference time (ISO UTC)Use an explicit timezone, for example 2026-01-01T09:00:00Z (UTC). Time precision is milliseconds: use at most three fractional-second digits.

02Your result

Your result will appear here. Choose an action after checking your inputs.

A quick guide

How to use this tool

Check the example and the unit beside each input.
Enter your values and choose Calculate.
Review the result and assumptions, then copy what you need.

Reset example restores the starting values. Clear removes text and number inputs, returns choices to their first valid option, and removes the result.

Reference guide

Explanation and worked examples

Negative remaining days means expiry is in the past. “Within validity period” is only a date check, not a complete trust check.

Use in day-to-day IT work

Check certificate renewal timing against a chosen reference time.

Checks before applying the result

Use the certificate issuer dates and an accurate reference clock. Allow for rollout and validation before expiry.
A valid date interval does not establish hostname matching, chain trust, permitted use or revocation status.

New to the terminology?

JWT: JSON Web Token: encoded claims that require verification before trust.
HMAC: A keyed message authentication code for checking integrity.
Fingerprint: A digest used to identify exact certificate bytes.

Keep exploring

How calculations work and where the models stop →