Got it that makes total sense.
So I guess my last question is how do I most easily track when renewals are going to specifically run so that I can always process new certs before renewals hit that week?
I could see this becoming very complicated with hundreds of subdomains and would need a good system to always make sure new certs are processed weekly?
Thank you!