Ephemeral Certificates (< 48h)

Aligning with CABForum's direction to eliminate OCSP reliance, home.keysupport.net aggressively renews its Let's Encrypt certificates every night (--force-renewal). This ensures certificate lifetimes remain under 48 hours, neutralizing the revocation window and removing the need to check revocation status for the gateway itself.