Doesn't seem that fatal to me. MozIdP completely ignores the duration value, and only ever issues 5min certs.