title: Increase validity of Always Encrypted Certificate
body: <p>I am using SQL Server's Always Encrypted feature to encrypt a few columns in the database using a master key that is protected by a self-signed certificate. The certificate is created using SQL 2016's Management Studio and always defaults to an expiration date that is one year ahead of the issue date - it is stored in the Windows Certificate Store for the current user.</p>
  
  <p>Is it possible to extend the validity of this certificate to a value  greater than a year? </p>
  
  <p>More specifically, can a certificate required by AE be scripted - from my understanding, this certificate is different from the sql certificate created by the CREATE CERTIFICATE command and needs to be exported to a file format like pfx to be accessible by an Azure web app.</p>
  
  <p>Also, can the data still be encrypted/decrypted if the certificate has expired?</p>