How will I know when Microsoft have released certificates to all of my enterprise estate, and anything not updated will require some form of remediation?  I feel a little lost not knowing if I'm in the current deployment ring or not