Comment by nottorp

> duration of 1 year or longer

Let's Encrypt is bringing the duration of certs down not up. I believe their goal is 30 minutes validity.