|
Root certificates are valid for many years for this reason. The certificates on the websites themselves, that are signed by intermediate certs that are in turn signed by those root certs, are the ones that rotate regularly and have had their valid lifetimes shortened.
|