[halviti]

The only problem with reducing the lifetime at the moment is that all of the solutions to use this for windows are ... lacking.

Without using the various hacks people have created, you can generate the certificates on linux and then move them over to windows, but doing this all the time is extremely inconvenient.

I hope that this gets addressed at some point, because encryption is important for everyone, not just linux admins.