In the past, I've had to set a system's CA and certs as far out as I could.  At the time I was doing that, it was still more than 20 years out, so didn't worry about it.

I haven't had the need for this since before eDir 9.x, but given we are approaching the (old?) default of a 10-year life of a CA, has it changed from the limit of 2036-02-03?

While I could fire up a test system for this, before I go through that effort, perhaps someone else knows the answer of how far can we kick it out to?

Like Y2K and the 2038 issues, it is something we need to know about, BEFORE we hit any issues about it, especially since likely fixes won't be trivial to create and implement.