The certificate could be generated with a private key that is not allowed to be exported. But this doesn't help in any circumstance and makes backups of the certificates more complicated for administrators. The suggested solution is a good way to imp...
The need is obvious. Due to the fact, that the certificates have to be renewed manualy it must be possible to set a reminder for the admins. This could be also a good thing for Alarm Manager. As soon as there is a useable trigger, one could use alarm...