Introduce a requirement to have a process defined (either manual or automated) for certificate renewal. Also introduce a requirement to have notifications for when a certificate is going to expire (time periods TBD)