Why is an EDS (enhanced qualified) issued for one year?

Question

Information Security

As a rule, the EDS is issued for one year. I met cases of issuing certificates for five years. I suspect there should be a normative document regulating the validity period of the EDS certificate for certain tasks.
Specifically, in my case, the task of signing electronic medical documents. In the regulatory documents, I did not find a limit on the period for issuing an EDS.

Answer 1

Because everyone wants money, but they don’t feel like working. You will also ask why each sharaga has its own requirements for the UCP and only the UCP with additional payment and its own GOST is suitable, as if we do not live in the same state. In fact, monopoly and cartel collusion, but the responsible authorities have no time to pay attention to such trifles, there are more important things to do.

Answer 2

For the same reason why you can't use PGP. CORRUPTION.

Answer 3

There are general considerations for the expiration of keys, passwords, etc. (they can simply leak for example)
I think that the very idea that they need to be changed from time to time does not cause rejection?
Well, then the traditional term is a year.
Sometimes CA prices also include long periods, but practice comes down to the fact that few people choose options for more than a year. This is both cheaper and, in general, more practical in terms of dynamic progress in this area (other keys may appear in a year, formats will change, etc.)

Answer 4

Mostly to protect against leakage and confirm that the recipient is still alive and kicking. For the same reasons that bank cards are issued for a maximum of two to three years. Maybe the key has been leaked for a long time and the one who put it on sits quietly, does not answer and uses it ...