They need to cast out the person who can’t renew the ssl certificate.

Who renews certificates these days? You automate that now, especially with 47 day certs coming.