I actually love the idea of 90 day (or less) certificates! Once you automate the process of replacing your certificate (which let&#x27;s encrypt will greatly help with), it won&#x27;t matter how short the period is. Also, if a key gets compromised, it&#x27;ll be valid for a shorter time. Give <a href="https:&#x2F;&#x2F;letsencrypt.org&#x2F;2015&#x2F;11&#x2F;09&#x2F;why-90-days.html" rel="nofollow">https:&#x2F;&#x2F;letsencrypt.org&#x2F;2015&#x2F;11&#x2F;09&#x2F;why-90-days.html</a> a read! If you want to get more in-depth about certificate revocation, <a href="http:&#x2F;&#x2F;news.netcraft.com&#x2F;archives&#x2F;2013&#x2F;05&#x2F;13&#x2F;how-certificate-revocation-doesnt-work-in-practice.html" rel="nofollow">http:&#x2F;&#x2F;news.netcraft.com&#x2F;archives&#x2F;2013&#x2F;05&#x2F;13&#x2F;how-certificate...</a> is also a great&#x2F;depressing read.