Could they not have asked their top-tier LLM for advice on how to avoid this massive loss? No? Oh.

I don’t know what the BFD is. Noone is supposed to handle certs manually anyway. OK, maybe companies that did not get the message but nowadays this is supposed to be automated and then it does not really matter whether the cert is valid for 90, 45, 30, or 6 days.

For security, it does matter, shorter is better.