See below for the certificate life-cycle operational requirements.