[Poll] Do we need longer cert validity times?

[Nit]

@My1

I thought they always check but are soft fail.

cf Revoked certs not showing as revoked in browsers