Certificate alerts

An alert notifies your team when a certificate is about to expire, or when a certificate is issued, renewed, or revoked. Each alert watches for one of these events and sends a notification to up to 10 channels. To create an alert, follow the guide for the channel you want to notify: Infisical checks for expiring certificates once a day, and sends issuance, renewal, and revocation alerts within seconds of the event. Importing a certificate into an application doesn’t trigger an issuance alert, but the application’s other alerts still cover the imported certificate.

​

Choose where to create an alert

You can create an alert for all of Certificate Manager or for one application: Use an application alert when one team owns the certificates and wants its own notifications. Use a Certificate Manager alert to cover several applications at once, or certificates that don’t belong to an application, such as imported or discovered certificates. If you delete an application, Infisical deletes its alerts too.

​

Filter a Certificate Manager alert

Without filters, a Certificate Manager alert covers every certificate in Certificate Manager. Each filter you add narrows the alert, and a certificate must match every filter: For example, a Source filter set to Imported covers every imported certificate, including ones outside any application or profile. Add an Applications filter as well, and the alert covers only the imported certificates in those applications. If you delete an application or profile that a filter lists, the deleted application or profile stays in the filter and matches no certificates. When you edit the alert, the Filters step shows it as Unknown application or Unknown profile, so you can remove it.

​

How often expiration alerts repeat

An expiration alert keeps notifying you about the same certificate until the certificate is renewed or expires. If you turn on Repeat daily until expiry, it notifies you every day. Otherwise, the interval depends on Alert Before:

​

Signer certificate expiration

A Signer Certificate Expiration alert, in the Code Signing group, warns you before a signer’s current certificate expires. You can only create it as a Certificate Manager alert. It covers every active signer under Code Signing > Signers and skips the Filters step. Otherwise, it works like a certificate expiration alert. When you reissue a signer’s certificate, the alert follows the new certificate and stops alerting on the one it replaced. The alert doesn’t cover disabled, failed, or pending signers.