I mean you'd think with the resources available at Facebook they would've:

1. Automated the certificate process to auto-renew at least a year before expiry.

2. Have counter-signatures

3. Have anyone at all use any sort of calendar system to just check in on it to be sure.

But I guess being one of the largest tech companies on earth doesn't mean you don't have massive oversights.