Always been a little bit hazey regarding the certificates on Cisco UCM and Unity Connection, probably because once they're in its years before they expire again and don't need to touch them. However as far as I understand, your main CallManager, IPSE...