Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 261

Requesting Certificates
Figure 11.7. Setting the Validity Period
The default validity period is five years.
12. Only when requesting a certificate through the Certificate Manager Console submitting the request
to the Certificate Manager automatically. Set the standard extensions for the certificate. The
required extensions are chosen by default. To change the default choices, read the guidelines
Appendix A, Certificate and CRL Extensions.
explained in
239