Ideally your server handles this automatically, which is why Let’s Encrypt is working on extending ACME to help with this case. Some good implementations of oc

Ideally your server handles this automatically, which is why Let’s Encrypt is working on extending ACME to help with this case. Some good implementations of ocsp stapling can already automatically get a new certificate if they receive a “revoked” ocsp response. Requiring humans to read their email and be looped in is work I want to avoid needing at all.