The DutchGrid medium-security Certification Authority has a root certificate and key pair with a validity of at most 20 years. The maximum validity of the key pair of an end-entity is 1 year.