Root CAs can't have 3 month validity. Any computer left offline for 3 months, or even 1 day (if coming up close to expiration) wouldn't be able to bootstrap an

Root CAs can't have 3 month validity. Any computer left offline for 3 months, or even 1 day (if coming up close to expiration) wouldn't be able to bootstrap an updated trust store.