mirrorlist and tracker should be fixed. I also found a mistake on the chaining that should be fixed site wide. The only ones left (I'm aware of) is the demo servers. The engineer that manages those is still sick but should have them fixed in the next few days.

Any more to report that I've missed? I've automated the distribution of certificates so that they should deploy automatically for each future renewal. We'll see how these automated processes work at the next renewal.