Could we do daily certificate updates? Does it have to be hourly? Can the certificates be stored ahead of time. The larger concern is CA failures

The expectation is that one day or less certificates would be the norm, no longer than 90 days.