This promise will check that certificate matches the key and will check
that it is renewed before 15 days before expiration.