Apple reduces certificate maximum allowed lifetime to 398 days (support.apple.com)

Previous discussion here https://news.ycombinator.com/item?id=22398063 but this is the first time we get an official statement from Apple, and not just second hand reports.