Shorter certificate lifetimes

Revocation isn't very reliable, though.