[phillipseamore]

Shorter certificate lifetimes will be enforced by the browsers no matter what the issuing CA is or what lifetime the CA will allow.

https://cabforum.org/working-groups/server/baseline-requirem...