chg: enforce email address for certificate was pinged within 6 months