@matigo guess they had just enough auto-renews that users forgot about to buy another year on the SSL cert.
Searching