Under "Manage AutoSSL", I have this selected:
Notify the administrator for AutoSSL certificate request failures, warnings, and deferrals.
I'm constantly hitting a snag where a certificate doesn't renew, and I think it's due to the firewall's CC_ALLOW_FILTER setting. But I never get an email...