XG web proxy modifies certificate start and end date

XG will build up a new Cert. There is no relationship between the old (original) cert and the new generated by XG. 

yes, that's what it looks like - so this is just a random value or is there any logic behind?

I mean, you could just use the original dates instead of creating new values.

yes, that's what it looks like - so this is just a random value or is there any logic behind?

I mean, you could just use the original dates instead of creating new values.

We simply generate a new certificate per website and this should have a decent amout of time. 

The DPI Engine will copy/paste the values of the original certificate. The Proxy is not doing this, because there is no need.

My cert for heise is expiring on 11.06.22 (Signed by my XG). 

thanks for confirming all is OK - did'nt know this is how it is supposed to be. you are using DPI?

Yes i do. Full decryption.