You can issue a 15-year SSL certificate today. Why almost nobody does

Most HTTPS deployments live in 90-day Let's Encrypt chunks. But for Cloudflare-proxied domains, there is a CA that issues 15-year certificates — here is the auto-issue pipeline that picks between Origin Cert, DNS-01 and HTTP-01 automatically.

Read More https://panelica.com/blog/15-year-ssl-certificate-cloudflare-origin-implementation