Ok, thank you very much for the detailed explanation. I see the problem.
in this case, I have created all certificates today. That means they will all expire together and I set the cron to 60 days. Its still 30 days before they will expire.
This should work, right?