Check Specific Certificate Expiration by powershell (Service Check)

See also Service Check

Basic Information

Service Check Name: Check Specific Certificate Expiration by powershell

Service Check Category: System Checks

Passive: No

Description

Do not confuse with Check Certificate Expiration by PowerShell (Service Check).

This service check uses PowerShell and the device credentials to connect to a target host and monitor its local certificate store. It identifies certificates that are about to expire within a specified number of days and supports advanced filtering by issuer, key usage, and the capability to exclude certificates that have expired for a specific duration.

Check-specific Configuration Fields

The following configuration fields are specific to this type of service check. See Service Check for configuration parameters common to all service checks.

• Expires Within (Days) - (Required) Causes the check to become critical if any certificate expires within the specified number of days.
• Certificate Path - Provide the path after cert:\LocalMachine\$path - (Optional) Defines the path to the local certificate store on the monitored device using the format cert:\LocalMachine\<StoreName> (for example, My for personal certificates or WebHosting).
• Issuer - Filters by the certificate issuer - (Optional) Lets you filter certificates by issuer name. Enter part of the issuer string (for example, CN=Your_Issuer_Here). The check automatically applies wildcards. If this field is blank, the check does not filter by issuer. It returns all certificates that meet the other criteria.
• Key Usage - Filters by Enhanced Key Usage List - (Optional) Allows filtering certificates by their intended use. Enter a specific text for the key usage, such as Server Authentication or Client Authentication. The check automatically applies wildcards (*) to match any key usage that contains the specified value. If this field is blank, the check does not filter by key usage. It returns all certificates that meet the other criteria.
• Exclude Days - Skips certificates expired by a certain number of days - (Optional) Excludes certificates that expired more than the specified number of days ago. This check helps reduce noise by focusing only on active or recently expired certificates. If this field is blank, the check includes all expired certificates.