6 days is still way too long. every request should get its own certificate. it's the only way to be sure.