Currently Meta servers (meta*.org, a-1.thiss.io and a-staging-1.thiss.io), load balancer servers (md*.org and static.*org, md-lb.thiss.io. static.thiss.io) uses SUNET Infra certs.
We monitor them in https://monitor.seamlessaccess.org/nagios4/.
Follow https://wiki.sunet.se/display/sunetops/How+to+create+infra+cert to create new infra cert. Check under nunoc-ops/ca.sunet.se/overlay/var/lib/ca/infra/requests/<peer/server/client> to see whether the curent CSR was created as peer, server or client.
After the cert has been updated, run cosmos and then service sunet-haproxy_seamlessaccess restart in load balancer servers, run cosmos and then service lighttpd restart in Meta servers to install the certificate.