I think a good rule of thumb here is: never EVER create a key without an expiration date. Because at some point, you will loose it, or its revocation key, and you might end up screwed. Just saying.