Reducing maximum lifetimes of TLS certificates to 90 days could eliminate up to 75% of third-party staleness.