SSL certificate lifetimes are really going down.

Cert maintenance has always been a disaster. It's much too critical to fully automate (fire and forget), and yet it's also cumbersome and tedious to manually implement, especially after-hours.