4 ms·

Everyone would just issue certificates for two years longer. This is designed to fix the fact that revocation is utterly broken.