Better yet, add an SSL check to your monitoring system: open a ticket when it's going to expire in 30 days.