pfSense

From the notes and commits on #9825 you can already see we lowered things to 398 days later in the issue, it did not stay at 825.

The default is fine since the default is user certificates, not server certificates. The text on the field turns yellow to warn the user that it's insecure once the page is switched to "server certificate", we don't need to override the user input in the field when that changes since the user may have some other use case which isn't bound by those limits.