[globie]

That's a good point. I suspect as the renewal period is shortened, scripts will attempt renewal faster and faster.

I hope they don't go any shorter than a month. Let the user pick, any value up to a year should do.

[conradludgate]

Browsers are eventually going to deny any certificate after 47 days iirc