Certificates should have an expiration date, any system implemented with this pattern should expire after a couple of hours.

If manual, I would even consider doing it every week with the caveat that it would be a large attack vector.