This is driven by a subflow called "Certificate Notification" and it keys of the value of "renewal_tracking" on each cert record. Make sure this is not set to tracked and it should not create any renewal tasks/Incidents. Your best option is to enable in a sub-production instance and review.