[dveeden2]

VALIDITY_DAYS="3650"

I'd rather see something with 90 days and ACME. Note sure why there isn't a simple certificate management tool that does this and maybe even brings a simple UI?

[kreetx]

This is for an internal network.