Dude, you need to figure out a way to automate that. It’s no way to live.

Make no mistake: this is an improvement.

There are substantial unsolvable issues with long lived certificates, and automatic deployment of very short lived certificates is the way to solve them.

Plan for certificate validity of six days in a few years.

YES! Keep cutting it down!

Revocation is a lost cause and if you don’t automate you deserve what you get.