I distinctly remember cks as the very guy who recommended ten years as an expiration date on my self-signed certificates, and I distinctly recall believing this was a bad idea because I'd be guaranteed to have trouble reconstructing the renewal process in ten years' time.
Thankfully I completely discontinued use of the relevant apps long before that deadline.