Cert Lifetime Lint — TLS validity caps 200/100/47

Finds the renewal settings in your repo that outlive the public TLS cap: 200 days since 15 March 2026, 100 days from 15 March 2027, 47 days from 15 March 2029.

# k8s/prod-cert.yaml spec: duration: 8760h # scripts/bootstrap.sh openssl req -x509 -newkey rsa:2048 -days 825 -out edge.pem # infra/tls.tf validity_period_hours = 8760 # crontab 0 0 1 */6 * /usr/bin/certbot renew --quiet # monitoring/expiry.py MAX_VALIDITY_DAYS = 398 Check this config