After a new mail TLS certificate is obtained, for example. Having a job to update the status of older certs might work.