Another great day battling cert-manager. But all certs are now updated; and I can start working on features rather than firefighting