It's how you detect something wrong in the CT logs, not just a routine certificate renewal