![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.world/pictrs/image/8286e071-7449-4413-a084-1eb5242e2cf4.png)
You can just issue new certificates one per year, and otherwise keep your personal root CA encrypted. If someone is into your system to the point they can get the key as you use it, there are bigger things to worry about than them impersonating your own services to you.
You can buy high (97-99) CRI LEDs for things like the film industry, where it really does matter. They are very expensive, but can pay for themselves with longer service life, and lower power draw for long term installations.
The CRI on regular LED bulbs was climbing for a long time, but it seems as though 90ish is “good enough” most of the time.