longer cert lifetime