From 688216996debe39d8016dd881d8d2cab84ec5476 Mon Sep 17 00:00:00 2001
From: Hikari <158005693+webHikari@users.noreply.github.com>
Date: Sat, 26 Oct 2024 00:01:22 +0300
Subject: [PATCH 1/2] Update expiration time at cert.go

---
 cert.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cert.go b/cert.go
index 4ce36ccf..dd8dd858 100644
--- a/cert.go
+++ b/cert.go
@@ -59,7 +59,7 @@ func (m *mkcert) makeCert(hosts []string) {
 	// Certificates last for 2 years and 3 months, which is always less than
 	// 825 days, the limit that macOS/iOS apply to all certificates,
 	// including custom roots. See https://support.apple.com/en-us/HT210176.
-	expiration := time.Now().AddDate(2, 3, 0)
+	expiration := time.Now().AddDate(0, 0, 397)
 
 	tpl := &x509.Certificate{
 		SerialNumber: randomSerialNumber(),

From 5fe6e8f2f88d1dfbe231bba78156f2ce5c5014df Mon Sep 17 00:00:00 2001
From: Hikari <158005693+webHikari@users.noreply.github.com>
Date: Sat, 26 Oct 2024 00:04:50 +0300
Subject: [PATCH 2/2] Update cert.go comments

---
 cert.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/cert.go b/cert.go
index dd8dd858..c86bfddc 100644
--- a/cert.go
+++ b/cert.go
@@ -56,9 +56,9 @@ func (m *mkcert) makeCert(hosts []string) {
 	fatalIfErr(err, "failed to generate certificate key")
 	pub := priv.(crypto.Signer).Public()
 
-	// Certificates last for 2 years and 3 months, which is always less than
-	// 825 days, the limit that macOS/iOS apply to all certificates,
-	// including custom roots. See https://support.apple.com/en-us/HT210176.
+	// Certificates last for 397 days, which is always less than
+	// 398 days, the limit that macOS/iOS apply to all certificates,
+	// including custom roots. See https://support.apple.com/en-us/102028
 	expiration := time.Now().AddDate(0, 0, 397)
 
 	tpl := &x509.Certificate{