The Certificate Expiration Check Service worker checks if a CA has certificates that are about to expire and sends an email notification to the end user and/or administrator. 

You may configure multiple certificate expiration services specified with different Time before notification is sent values to further alert the user or administrator that a certificate is about to expire.

The following lists available worker settings:

SettingDescription

CAs to Check

Select here which CAs that should be searched for expiring certificates.

Certificate Profiles to Check

If any certificate profile is selected from this list, the notification service will require that certificates are issued by the selected CAs AND that they are issued using one of the selected certificate profiles. Leaving this list empty will cause the service to search for certificates just based on the CA selection.

Time before notification is sent

The number of Days/Hours/Minutes/Seconds that should remain of the certificates validity before the notification is sent.

Send notification to end user

Check this if a notification should be sent to the owner of the certificate. Note that the end user must have an email set in the user database (not necessarily in the certificate) in order for the service to send the notification.

Notification Subject to End User

The e-mail subject.

End User Message

Message body of the notification. Substitution variables can be used here as defined in E-mail Notifications.

Send notification to Administrator

Check this if a notification should be sent to some defined administrator-mail address. The address of the administrator is configured in the Mail Action component.

Notification Subject to Administrator

The e-mail subject.

Administrator Message

Message body of the notification. Substitution variables can be used here as defined in E-mail Notifications.