Maximum (and minimum) certificate lifetimes?

[ggiesen]

@tlussnig

HTTP Public Key Pinning

The short lifetime will also be a disaster for those of us with DANE TLSA records... Is LE going to update my DNS records for me automatically? And more importantly, should I let it?!?!