update vpn certificate before it expires
-
we could just download a vpn cert every 5 days (the easy solution)
-
Alternatively we could check the expiry date and fetch a new cert if the old one is about to expire, e.g. 3 days before.
In any case, we should only fetch the VPN cert after being connected to the VPN.