@ -643,7 +643,7 @@ func (c *CaCertificateEntry) UnmarshalYAML(value *yaml.Node) error {
return fmt.Errorf("config error: %w", err)
}
if prof.Validity.Years > 0 || prof.Validity.Months > 0 || prof.Validity.Days > 0 {
if prof.Validity.Years <= 0 && prof.Validity.Months <= 0 && prof.Validity.Days <= 0 {
prof.Validity.Years, prof.Validity.Months, prof.Validity.Days = defaultValidity(usage)