>just a few years of damage. Something in there is telling you that you're doing the worst of both worlds, by allowing such a huge gap between renewals that pe

>just a few years of damage. Something in there is telling you that you're doing the worst of both worlds, by allowing such a huge gap between renewals that people merely forget leading to outages, and such a huge gap that if a key is to expire, someone else could use it for years before someone notice and actually revoke the old key. derefr above has the correct response.