I noticed in a dev commit some changes to warranty domain and cert notifications from 1, 7, 14, 30, and 90 to just 1, 7 and 45 days.

In my opinion the alert for certs should be 1, 7, 14 and 21 days. It's not really an actionable notification unless they aren't LE certs - and most are these days. But if I was alerted 3 weeks before it expires - ya that's probably something I need to action on and see why auto renew didn't work.

I admit, I don't know if 3 weeks would be enough time for all commercial certificate renewals. The other 2 alerts make sense at 45 days for sure.

You found one of the easter eggs haha, Makes sense to me

A Let's Encrypt SSL will renew at around the 30 days before expiry mark so 45 days might be a little high. If it hasn't renewed by 21 days then it'd be worth into.

not to hijack but would it be possible to monitor certs for subdomain services?

test.com is monitored and its cert

what about sub.test.com cert if wild is not used.

    ybc Please raise a separate thread in future but yes, the certificates module already supports subdomains

    • ybc likes this.