Hacker News Reader

Anyone can create a certificate with any duration they like. Getting others to trust that certificate is the tricky bit.

These "large companies" put restrictions on what certificate authorities are allowed to do so that they can keep their users safe.

Safety at the expense of personal freedom to choose for yourself? What if I do not want the "safety" that these "large companies" claim to provide?

Spin up your own (possibly private) CA.

You're welcome to compile your own Firefox or Chromium build if you disagree with the trust decisions the default ones make.