# Cert-validity isn't working **URL:** \ **Category:** Elastic Cloud on Kubernetes (ECK)\ **Created:** [February 10, 2020, 4:10pm UTC](https://discuss.elastic.co/t/cert-validity-isnt-working/218631 "2020-02-10T16:10:48Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![deepak\_deore](https://avatars.discourse-cdn.com/v4/letter/d/9fc29f/32.png) [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Post date:** [February 10, 2020, 4:10pm UTC](https://discuss.elastic.co/t/cert-validity-isnt-working/218631/1 "2020-02-10T16:10:48Z")
I asked this question on slack but no reply yet so asking here: is there anything wrong with these ssl options, it doesn’t seem to be working, it always show 1 year certificate while accessing 9200 port this is the operator’s ps output, i re-created `elasticsearch` quickstart but cert is still 1 year, anything I am doing wrong? ```auto ./elastic-operator manager --operator-roles all --log-verbosity=1 --cert-validity=15m --cert-rotate-before=5m ``` ---
**Author:** ![Anya\_Sabo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anya_sabo/32/49903_2.png) [@Anya\_Sabo](https://discuss.elastic.co/u/Anya_Sabo)\ **Post date:** [February 10, 2020, 7:34pm UTC](https://discuss.elastic.co/t/cert-validity-isnt-working/218631/2 "2020-02-10T19:34:07Z")
Thanks for bringing this up -- I could reproduce it and raised an issue here to fix it: [https://github.com/elastic/cloud-on-k8s/issues/2540](https://github.com/elastic/cloud-on-k8s/issues/2540) In the meantime if you set the CA rotation parameters, that will also affect the certificates issued from the CA. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [November 4, 2022, 7:44am UTC](https://discuss.elastic.co/t/cert-validity-isnt-working/218631/3 "2022-11-04T07:44:18Z")