Today, when C:D calls out to a remote server, it logs some details about the certificate it received. It would be nice if it also logged the expiration date. This would allow us to write, say, a Perl script to scan the logs once a day looking for certificates due to expire soon.
You'd think folks would pay attention to when their own certificates are due to expire but not everybody does. It would be a nice service to monitor for them.