Mandatory cert rotation forced by a dependency that had a leak, and they all didn’t handle it properly. (Just a guess)