People will just roll out almost forever-lasting certificates through their internal CA for all systems that are not publicly reachable.