Post #1434217

@jdm_ @whitequark Us, more than ten years ago: "We need a private TLS certificate authority root certificate for our VPN servers, surely the default lifetime of ten years is good enough." Us, ten years after generating the certificate: "Who could have possibly foreseen that a computer science department would still be here ten years later." (Okay, 'and using the same VPN systems'. Our new CA root certificates have a much longer lifetime, although not 100 years for TLS reasons.)