I've been experimenting with LetsEncrypt SSL certificates and managed to get certificates set up and installed on Windows for use with IIS using the ACMESharp Powershell library. The process to do this is reasonably straight forward and the cert works fine.
But... certificates have a relatively short lifetime of 3 months and since the process is now self-managed - as opposed to some vendor reminding you to renew - I'm worried about notifications of when renewals are required.
Can somebody recommend a good way to check for expired certificates and then - at minimum - send out some sort of notification, or even better to automatically renew the certificate?