I'm looking for recommendations on tools to help manage certificate inventories and keep track of expirations for large organizations, especially those with a few hundred subdomains. What tools do you all use that send reminders and help streamline the process?
5 Answers
If you’re working with Kubernetes, there are operators available that can issue and automatically renew certificates. It takes away a lot of the hassle of managing certs manually.
You might want to consider using Uptime Kuma. It's an open-source monitoring tool that can keep an eye on your endpoints and check for certificate expirations. It's easy to set up in a container, and you can configure it to send alerts through your preferred messaging platform.
Certbot combined with a spreadsheet can be a solution, but honestly, good luck remembering to update that spreadsheet until the last minute when something fails! It's a bit risky, especially for larger setups.
We use DigiCert at our organization, which sends reminders at 90, 60, 30, and 3 days before expiration. Although we have to handle the tracking and requesting new certificates manually, it does keep us ahead of the game.
Have you checked out VAULT PKI? I created a solution that automates and monitors certificates, it might suit your needs well. If you want to see what I built, here’s the toolkit I developed: [https://github.com/sy-cmd/vault-pki-toolkit](https://github.com/sy-cmd/vault-pki-toolkit). It can really help simplify things!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures