Thanks @rg305 for the links, actually I didn't find anything related to the root cert expiry for k8s, is there any topic related to it? also may I ask how we can request to remove us from rate limit of 5 cert reissues? we were testing cert manager upgrade by upgrading to major releases and got ourselves locked down in your API 
, please advise.
Thanks in advance