Yes, yes. It’s common knowledge that passwords magically become unsafe after a period of time and need to be changed. It’s the same with certificates. Sadly, there is no way of revoking them when the secret becomes compromised, so reducing the validity time is the only way out. Yes, yes.
Seriously: gladly there is a the acme client to automatically renew certs. In most of the cases. (Good luck with appliances that don’t provide automatic cert renewal though. :)
Yes, yes. It’s common knowledge that passwords magically become unsafe after a period of time and need to be changed. It’s the same with certificates. Sadly, there is no way of revoking them when the secret becomes compromised, so reducing the validity time is the only way out. Yes, yes.
Seriously: gladly there is a the acme client to automatically renew certs. In most of the cases. (Good luck with appliances that don’t provide automatic cert renewal though. :)