We've encountered a lot of problems of our own making in the TLS/PKI ecosystem in recent years, and whilst we've got better at dealing with them and even avoiding them, there's still a way to go. Certificate Lifetime The focus of these blog posts will be on the maximum