Certificates expire 1 year after issuance.