diff --git a/lib/certGenerator.js b/lib/certGenerator.js
index 6f6b835..189cb65 100644
--- a/lib/certGenerator.js
+++ b/lib/certGenerator.js
@@ -13,8 +13,9 @@ function getKeysAndCert(){
   cert.publicKey = keys.publicKey;
   cert.serialNumber = '01';
   cert.validity.notBefore = new Date();
+  cert.validity.notBefore.setFullYear(cert.validity.notBefore.getFullYear() - 10); // 10 years
   cert.validity.notAfter = new Date();
-  cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10); // 10 years
+  cert.validity.notAfter.setFullYear(cert.validity.notAfter.getFullYear() + 10); // 10 years
   return {
     keys: keys,
     cert: cert
@@ -82,4 +83,4 @@ function generateCertsForHostname(domain, rootCAConfig){
 }
 
 module.exports.generateRootCA = generateRootCA;
-module.exports.generateCertsForHostname = generateCertsForHostname;
\ No newline at end of file
+module.exports.generateCertsForHostname = generateCertsForHostname;