Hi, to all of you who are using CA certs on SQL Server boxes to avoid the need to check that pesky 'Trust Server Certificate' box.
It seems there is an industry-wide agreement to shorten the validity period of these certs, down to just 47 days in 2029:
Shorter validity periods coming for SSL/TLS certificates: What it means for you - GoDaddy Blog
Are there efficient ways of dealing with cert renewals? Ideally not requiring restarts of the SQL Server service every time, though I'm not sure that is avoidable.