Even with annual certificate renewal, I'd find I'd make mistakes and/or that things had changed in the intervening time. It's also infrequent enough to often r

Even with annual certificate renewal, I'd find I'd make mistakes and/or that things had changed in the intervening time. It's also infrequent enough to often remain a manual process when it really should be automated. That said, I still haven't automated renewal of my personal ones using LetsEncrypt, but it's also so simple I don't really need to. At any of my previous jobs where I've had to deal with certificates, a 90 day cycle would have guaranteed I'd have it down to at least just "run this script"