SSL Certificates

TLS certificates for the example service's public endpoints are issued automatically and renewed well before expiry, so manual certificate management should rarely be necessary.

If a certificate does need to be renewed or replaced manually — for example when adding a new domain — the request should be issued for example.com and its relevant subdomains, and validated using the same domain validation method used for existing certificates so the process stays consistent.

Certificate expiry is monitored separately from the automatic renewal process itself, so that a failed renewal is caught with enough lead time to fix it before the certificate actually expires.