It's not that complicated, just add scheduled health checks to the same system you use for checking if the website and such is up. If the expiry date isn't upda

It's not that complicated, just add scheduled health checks to the same system you use for checking if the website and such is up. If the expiry date isn't updated within a week of expiry start paging engineers. I'm willing to bet Mozilla already does something like this but an engineer didn't set it up correctly for this certificate.