Yes, I had never thought about that use of expiry dates. Thanks.

I also never thought to make the revocation cert at the time of key generation. That's a good idea.

Thanks for listening and thanks for the tips!