The maximum validity period of TLS/SSL certificates is currently at 825 days (2 years, 3 month, and 5 days). The validity period was sheared from 10 years down to 5 years, and finally to 2 years, owing to the security concerns associated with protracted validity periods. An organization may undergo many changes over the course of 5 or 10 years–mergers and acquisitions, management shuffles, or employees leaving. In such a scenario, domain names are subject to change, and so are certificate ownerships. If a certificate that has a 5-year validity were deployed for the old domain name, it has to be revoked, and a new CSR has to be raised for the new domain. Sometimes, organizations may forget to revoke old certificates. The website may now have a different domain, but the old domain would still be valid because its certificate is still active. Hackers could use those domains to create their own websites that look like they belong to the organization. They can get unsuspecting people to visit those websites and surrender their data, which would go straight to the hackers’ systems.