diff --git a/lemur/common/missing.py b/lemur/common/missing.py
index a4bbba77..508019b2 100644
--- a/lemur/common/missing.py
+++ b/lemur/common/missing.py
@@ -16,6 +16,9 @@ def convert_validity_years(data):
         data['validity_start'] = now.isoformat()
 
         end = now.replace(years=+int(data['validity_years']))
+        # some CAs want to see exactly two years validity, and not two years plus one day, as is the case currently
+        # 1/25/2019 + 2 years ==> 1/25/2019 (two years and 1 day extra, violating the 2 year's limit)
+        end = end.replace(days=-1)
         if not current_app.config.get('LEMUR_ALLOW_WEEKEND_EXPIRATION', True):
             if is_weekend(end):
                 end = end.replace(days=-2)