PKI monitoring best practices