Mostly because of an internal web site that has a certificate issued by an internal CA. This web site is accessible from the outside by some machines but these machines aren't part of our domain and ...

I'm puting the final touch to a software that should help me not forget to renew all my ssl certs. In short, I point it to a port that accepts TLS/SSL handshake and it pulls the server certificate, ...