Why are SSL certificates dropping to 47 days? Because revocation is broken.
OCSP fails open. Revocation lists go stale. A stolen certificate stays trusted too long.
Short lifespans are the industry's workaround.
https://runasradio.com/Shows/Show/1041
#SSL #InfoSec
