Http-01 validation cache?

I just read this thread and I understand how that stuff works now.
It just doesn’t sound right that I can still have certificates issued for domains which I don’t own anymore. 7 days seems fine and the reason I can’t find any HTTP hit on acme-challenge pages is probably that I still have old validations that are valid for more than 60 or 90 days unless old ones generally aren’t valid anymore.