[cpach]

Either that, or use an ACME client that has support for ARI so that the CA can signal to the client when it’s time to renew.

https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-...