DKIM Key Expiration

Hi,

When enabling DKIM signing on a domain we need to fill the "Signature expiration".

1. What happens after expiry?
2. From what instant does that "timer" start counting time?
3. Is there any best practice for that value?
4. Si this something specific to SMG or an industry standard?

Regards