why digital certificates shouldn t last forever