Where it usually breaks
And how to keep it from happening.
- A certificate is filed against the wrong style.
- A credential has no expiry date and never appears for renewal.
- A replacement certificate overwrites the earlier one and the evidence for past sessions is lost.