Figure 1. It's important to keep the duration short so that the public can trust that the certificate is reviewed for accuracy fairly often. Here, we leave the default value for this system.