Is this entire process (Microsoft, OEM, and admin communication) the best -- most clear and efficient method -- of getting these certificates updated?  I thank you for doing this AMA, but one would think the necessity of an AMA would imply that there's been some failures on communications to make this a smooth process for admins.