We have several questions regarding httpd certs, certwatch and mod-ssl

Issue

We would like answers to the following questions regarding httpd certificates. mod-ssl and certwatch

• 1) how did these certificates get created? is this done routinely on o/s upgrades and installs?
• 2) can i just move or delete the certificate with mv or rm? or is an openssl command the preferred method?
• 3) what openssl options would be preferred?
• 4) why is certwatch not emailing us? is that due to the CN in the certificate?
• 5) why did the CN in the cert get set to localhost.localdomain, rather than ?