90 days is our choice, 90 days and one second validity isn’t necessarily an issue. The issue is that we said in our CPS that the lifetime was exactly 90 days,

90 days is our choice, 90 days and one second validity isn’t necessarily an issue. The issue is that we said in our CPS that the lifetime was exactly 90 days, and then we did something different, even if just by one second. The problem here is behavioral consistency with our own published policies. We now just say “less than 100 days.” An unfortunate side effect of being more specific and informative in these documents (e.g. saying our certs have 90 days validity) is that it ups our chances of noncompliance if we are off on something by a bit, even if it is a meaningless bit. There is an incentive to not be so specific so as to avoid situations like this.