I think most of that is generated by CA. Does it even allow to specify arbitrary validity time?