Since the roles heavily depend on X.509 certificates for protecting communication channels, it is vital to make sure the certificates are checked for their validities in order to notify administrator when the certificates need to be renewed.

It would be useful to implement cronjobs for all certificates used by different roles to make sure certificates are renewed in timely manner.

The following should be done:

• Expand all roles that deploy certificates to also deploy a cronjob that checks for validity of certificate. The cronjob should produce results in output format that makes it easy to notice certificates that are near expiration (within 30 days).
• At least the following roles should be updated: wsgi_website, ldap_server, mail_server, xmpp_server, php_website, and web_server. Check if any other roles need to be updated.
• Update role documentation.
• Update usage instructions.