I don't know for the rest, but for letsencrypt you don't even have an option to set the expiration date, as far as I know. You have to make sure certificates generated there are regularly refreshed (every three months). So it might well be an imposition from the Certificate Authority.