Make no mistake: this is an improvement.

There are substantial unsolvable issues with long lived certificates, and automatic deployment of very short lived certificates is the way to solve them.

Plan for certificate validity of six days in a few years.