The answer is obviously a 4 day lifecycle for interim CA certs.