3 ms·

Except when restarting the services that rely on the certificate doesn't work reliably... but yeah, needs to be automated.