Comment by kxxt

It's because CRLs/OCSP sucks so now short expiration is rolling out.