I wasn't one of the downvoters, but I will say: > I think sysadmins need monitoring and automation tools so that expired certificates can be an exceedingly rar

I wasn't one of the downvoters, but I will say: > I think sysadmins need monitoring and automation tools so that expired certificates can be an exceedingly rare event. Letsencrypt has taken a big step towards this by making a fully automated process to get a certificate. I fully agree with this. :)