Ok new piece of 'moving parts' we need to address within 8 days. The DigiCert TLS cert for *.osquery.io needs to be renewed. We should move over to LetsEncrypt and we'll need to use the cert within AWS CloudFront. Also I think we can move off of CloudFront and onto a free (if available) load balancer that allows us to TLS terminate. We front the homepage and pkg. IIRC.

Just checking, did anyone address this or is it about to become a problem?

thanks for following up, they should be using Amazon certs as of a few hours ago