I think all these certs need to be renewed annually, is anyone doing them bi-annually? Seems like there must be a best practice to avoid getting to close to the expiration and then having issues renewing the credentials.
The problem I'm referring to is the creeping renewal date. If you botch it and miss by a day you are really screwed. If you have a great day already set up on September 15th for example, you have to keep moving the date to play it safe, so why not just keep renewing it on your scheduled date, but also renew it 6th months prior to keep the expiration from creeping.