In summary, the proposed certificate maximum lifetime:<p>- Domain Validation: from 398 to 90 days (same as the Let's Encrypt limit [1])<p>- Root CA: from 30+ to 7 years<p>- Subordinate CA: 3 years<p>[1] <a href="https://letsencrypt.org/2015/11/09/why-90-days.html" rel="nofollow">https://letsencrypt.org/2015/11/09/why-90-days.html</a>