'It’s very rare that you’ll want certificates that last longer than a year, except in those rare cases where a host cannot be changed. No, I don’t mean “the boss would really like this host to never change,” I mean “the federal government has declared this host a life-sustaining service and changing the certificate is a felony.”' #ssh2e #sysadmin