Embed Notice

@falcon You want certs to be much more short-lived than domain registration so that you don't have to rely on revocation. And there's no way evaluate registration lifetime anyway except "registrar says so in the whois text" which isn't really suited for cryptographic trust use. Just sticking to short lifetimes ensures certs will have very short validity past transfer of ownership tho, which is probably fine since nobody launches an important service right after domain transfer.