For Active Directory Certificate Services (MS ADCS), allow numbers greater than 999 to be entered in the Role Installation wizard.
When specifying the validity period for a Root CA, although the period can be changed to days, months, weeks or years, the value has a maximum value of 999. This is useless when it is necessary to accurately specify a number of days when the Root CA certificate should be valid for beyond 999 days etc.
Alternatively (or as well!), allow a specified date/time to be entered when installing the ADCS role as the expiry date/time for the CA certificate.