Google Trust Services supports short-lived certificates.

You may request short-lived certificates by specifying the duration in your CSR
or by using an ACME client that supports the validity extension (e.g., passing
the `--valid-to '+7d'` flag in `acme.sh`). The value `+7d` may be changed to any integer
from 1 to 90.

ACME clients that support the validity period flag include: acme.sh,
cert-manager, lego and smallstep