https://blog.it-kb.ru/2010/02/25/active-directory-certificate-services-increasing-the-validity-period-of-certificates/