Cleaning up old certificates

A post was split to a new topic: Cleaning up on-demand certificates