That's absolutely incorrect. While CABF sets the 'Baseline Requirements' that ultimately go into the WebTrust audit scheme that root programs use to accept roots into their trust stores...browsers can and do set their own rules.
The reduction of TLS cert lifetime to a max of 398 days was an Apple policy.
The reduction of TLS cert lifetime to a max of 398 days was an Apple policy.