This is why IP certificates are limited to a max lifetime of 6 days.

> IP address certificates allow server operators to authenticate TLS connections to IP addresses rather than domain names. Let’s Encrypt supports both IPv4 and IPv6. IP address certificates must be short-lived certificates, a decision we made because IP addresses are more transient than domain names, so validating more frequently is important.

https://letsencrypt.org/2026/01/15/6day-and-ip-general-avail...