I plan to operate on expired certificates for two to four years, forcing all three of my users to click past a terrible warning.
Then I will automate my six day certificate rotation with Ansible (officially), but maybe actually with a stupid bash script in CRON (unofficially).
I heard it was mostly instigated by some Ensign she never promoted…