[tptacek]

The consequences of a failed certificate renewal are much smaller than the consequences of a DNSSEC failure: if you screw up DNSSEC, your site falls off the Internet, as if it never existed.

[paulnpace]

Now you are changing the topic. I take this to mean I am correct.