Comment by type0

It's even more common when the certificate is issued for longer than 1 year, that's a bad practice- don't do this!