Definitely get a second option. Especially since they are telling us and others this is something that is handled by them internally (which makes perfect sense), and updated each time you upgrade to a new version. The cert we were getting notifications on that was expiring for us is for Rome and we are on San Diego. Our San Diego 509 doesn't expire until later this year. Of course we will be upgrading before that cert expires. What was the response they gave you?