Best practices for when to get a new certificate

I wasn’t sure if you meant ACME account keys or the private keys for certificates, and also whether these are subdomains of your domains or not.