Expiry is an ops problem
Domain auto-renew fails more often than people admit. TLS certificates still expire when DNS or CAA records block issuance.
Watch both signals in one list. Pair Domains with Uptime so you see reachability and expiry in the same workspace.