Nice choice!

The 90 days xpiration is a good thing and should be done by all others too. It is hard to revoke a cert so it limits damage from key compromise and mis-issuance to have short lifespans.

I plead for RFC change to max 90 days

Also it would encourage other authorities to automate the renewal like letsencrypt does because manual renewal would become really expensive.