The 2023 cert expires on 6/13/2035 or in about 9 years, when will Microsoft start working on pushing the next CA to partners so we don't have the last minute push like we are having with the 2011 cert?  With web PKI it's common to start pushing a new root 5 years before the current root expires aka around 2031.