the custom probably comes from the era when people had to pay for SSL certificates, but it's still good security hygiene. it's easy to revoke a certificate tha

the custom probably comes from the era when people had to pay for SSL certificates, but it's still good security hygiene. it's easy to revoke a certificate that you know was compromised, but what if you don't know it was? a temporal security gap could expose your eternal private key. with a short shelf-life it doesn't give attackers a lot of room to maneuver. otherwise, they could wait for an opportunity to chain it with another exploit and really ruin your day.