If that's the case, the previous implementation was correct and they'll start issuing certificates with 90 days - 1 second now.