My approach is the opposite. For production certs, I buy them with the minimum length (usually 1 year). This exposes problems in our automation sooner, and keep

My approach is the opposite. For production certs, I buy them with the minimum length (usually 1 year). This exposes problems in our automation sooner, and keeps the process more fresh in our minds. I really like that Let’s Encrypt certificates last only 90 days. That said, the CYA aspect of “10 years, somebody else’s problem” is really appealing. If only I believed that it wouldn’t be my ass on the line 10 years from now!