[Freeipa-users] Re: default certificate validity length should be less than 1 year.