diff --git a/internal/config/config.go b/internal/config/config.go
index 39727a2..1523835 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -643,7 +643,7 @@ func (c *CaCertificateEntry) UnmarshalYAML(value *yaml.Node) error {
 				return fmt.Errorf("config error: %w", err)
 			}
 
-			if prof.Validity.Years > 0 || prof.Validity.Months > 0 || prof.Validity.Days > 0 {
+			if prof.Validity.Years <= 0 && prof.Validity.Months <= 0 && prof.Validity.Days <= 0 {
 				prof.Validity.Years, prof.Validity.Months, prof.Validity.Days = defaultValidity(usage)
 			}