Managing certificates can also be a challenge sometimes, specifically if you have multiple domains with SSL enabled.
You need to keep track of certificate expiration and also have to stay tuned related to any newly discovered protocol attacks as that would mean that the browser will stop supporting those certificates in a while.
Let's understand this with two sets of use cases: