Apple is apparently further reducing the allowed lifetime of certificates: https://www.theregister.co.uk/2020/02/20/apple_shorter_cert_lifetime/ No official word from Apple yet though. It seem we'll have to update our makedummycert script again. See bug 7401 for the last time we adjusted this.
Official statement from Apple: https://support.apple.com/en-us/HT211025 Good news for us; this only affects certificates issued by "normal" CAs and not those from any extra CAs a user or administrator adds. So there is nothing for us to do here.
