Resource
Reign in Your Rogue Admins: Best Practices for Managing SSL/TLS Certificates
Reign in Your Rogue Admins