TLS certificate expired

Mobile clients and webhooks fail TLS handshake after a cert lapsed on the edge. Decide renewal vs rollback under pressure.