Certmonger meansures certificate expiry in days, but some Ephemeral PKI setups issue 24 hour long certificates, breaking autorenewal.
Metadata Update from @admiyo: - Issue set to the milestone: 0.0 NEEDS_TRIAGE