Certificate Expiration 30 Days
Summary
This monitor looks for any SSL certificates that have an expiration date of less than 30 days. This solution is effective for catching machines that may have been missed and do not have active reminders in place for certificate renewals. Additionally, the difference between the certification addition and expiration should be at least 30 days to trigger an alert.
Dependencies
- Custom Field: Certificate Expiration Alert
- Custom Field: Disable Cert Expiration Alerts
- Custom Field: Disable Cert Expiration Alert
- Group: Certificate Expiration Monitoring
- Solution: Certificate Expiration Monitoring
Monitor Setup Location
Monitors Path: ENDPOINTS ➞ Alerts ➞ Monitors
Monitor Summary
- Name:
Certificate Expiration 30 Days - Description:
This monitor looks for any SSL certificates that have an expiration date of less than 30 days. This solution is effective for catching machines that may have been missed and do not have active reminders in place for certificate renewals. Additionally, the difference between the certification addition and expiration should be at least 30 days to trigger an alert. - Type:
Script - Severity:
Critical Impact Alerts - Family:
Security
Targeted Resources
- Target Type:
Device Groups - Group Name:
Certificate Expiration Monitoring
Conditions
- Run Script on:
Schedule - Repeat every:
1Hours - Script Language:
PowerShell - Use Generative AI Assist for script creation:
False - PowerShell Script Editor:
- Criteria:
Contains - Operator:
AND - Script Output:
The following certificates are expiring within - Escalate ticket on script failure:
False - Add Automation:
Ticket Resolution
Automatically resolve: False
Monitor Output
Output: Generate Ticket
Completed Monitor
Changelog
2026-08-24
- Updated the Strapper module import method.
- Excluded certificates whose friendly name contains "TenantEncryptionCert".
2026-02-19
- Initial version of the document