certutil -setreg ca\ValidityPeriod "Years"  
certutil -setreg ca\ValidityPeriodUnits "5"