4 ms·More specifically: because they cannot be revoked, they need to expire. Same with root certs.by snowwrestler 8mo agoMore specifically: because they cannot be revoked, they need to expire. Same with root certs.