I'm just thankful we switched to afd and never have to think about certs (neither issuing nor deploying) again. You should check it out!