Certificate alerts

An alert notifies your team when a certificate is about to expire, or when a certificate is issued, renewed, or revoked. Each alert watches for one of these events and sends a notification to up to 10 channels. To create an alert, follow the guide for the channel you want to notify: Infisical checks for expiring certificates once a day, and sends issuance, renewal, and revocation alerts within seconds of the event. Importing a certificate into an application doesn’t trigger an issuance alert, but the application’s other alerts still cover the imported certificate.

​

Choose where to create an alert

You can create an alert for all of Infisical Certificate Management or for one application: Use an application alert when one team owns the certificates and wants its own notifications. Use a Certificate Management alert to cover several applications at once, or certificates that don’t belong to an application, such as imported or discovered certificates. If you delete an application, Infisical deletes its alerts too.

​

Filter a Certificate Management alert

Without filters, a Certificate Management alert covers every certificate in Infisical Certificate Management. Each filter you add narrows the alert, and a certificate must match every filter: For example, a Source filter set to Imported covers every imported certificate, including ones outside any application or profile. Add an Applications filter as well, and the alert covers only the imported certificates in those applications. If you delete an application or profile that a filter lists, the deleted application or profile stays in the filter and matches no certificates. When you edit the alert, the Filters step shows it as Unknown application or Unknown profile, so you can remove it.

​

How often expiration alerts repeat

An expiration alert keeps notifying you about the same certificate until the certificate is renewed or expires. If you turn on Repeat daily until expiry, it notifies you every day. Otherwise, the interval depends on Alert Before:

​

Signer certificate expiration

A Signer Certificate Expiration alert, in the Code Signing group, warns you before a signer’s current certificate expires. You can only create it as a Certificate Management alert. Otherwise, it works like a certificate expiration alert. Without filters, the alert covers every active signer under Code Signing > Signers. To cover only some signers, add a Signers filter in the Filters step and select up to 100 signers. Signer alerts also differ from certificate alerts in these ways:

• The alert doesn’t cover disabled, failed, or pending signers
• When you reissue a signer’s certificate, the alert follows the new certificate and stops alerting on the one it replaced
• If several signers share a certificate, the notification names only the ones the filter selects
• If you delete a signer that the filter lists, the Filters step shows it as Unknown signer when you edit the alert, so you can remove it