Over the weekend I saw that third-party certs which are valid > 1 year are at risk from cipher advances. i.e. vulns are found faster than certs expire, therefore, shorter expiry dates are recommended for better security.
To that end, several big institutions are moving that way.