[tonyhart7]

isn't this the other way around ??? because shorter expiration time resulting on more issuing cert and therefore make it more prone to downtime

[RetroTechie]

And perhaps more opportunities to insert bad certificate somehow.