> As a solution, the CRON job responsible for the DNS failover also checks for the current week number of the year so that:<p>> In an odd week number, the first server is the default master<p>> In an even week number, the second server is the default master.<p>This is nice. Fixes the difficulty with cert issuance in a pretty low effort manner, and ensures the failover is exercised. I've dealt with failover systems that were very rarely exercised, which usually means a lot of excitement when it does happen.