would you say the same thing if these certs were being actively misused? how long should they get to run amok? if you don't have a fast process for replacing t

would you say the same thing if these certs were being actively misused? how long should they get to run amok? if you don't have a fast process for replacing this stuff, you're going to have a bad day eventually