Need advance notice of SSL certificate changes

[David Ash]

I administer the Google Apps domain for a large company. We had an issue recently with errors from our group provisioning code that makes API calls to Google: the SSL certificates were changed on the Google side without notice, resulting in production errors with our code, until our support team was able to determine the issue and update the certificates. Is there a communications channel to announce such changes ahead of time that we can be part of? We need a way to proactively deal with certificate changes before failures occur. 

Here are details from the support team: 

"We were getting the following error while trying to access the url https://apps-apis.google.com/a/feeds/group/2.0/perceptivesoftware.com 

com.wm.app.b2b.server.ServiceException: iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier. 

The issue got resolved after we extracted the certificates from the above url and installed them onto our servers. We did not have any prior information of this change due to which transactions were failing in production. 

We therefore need your help in order to make sure that any further certificate change/renewal is intimated to the team so that we can plan accordingly and therefore help preventing any negative impact due to transactions failing at our end."