There is no legitimate reason why you would need to keep all your servers updated all the time just because you want to have your cert continuing working.

On my case, I was annoyed with an old vps for example because impossible to use docker or snap because you need kernels modules that you don't control in such a setup.