I'm coming around to short life certificates. Tbh If scripting renewals weren't a thing, I'd still hate the concept.