Dashboard
Last scan: today 02:14 UTC
4,821
Total Tracked
All environments
4,602
Healthy
> 30 days remaining
156
Warning
14–30 days remaining
63
Critical
< 14 days remaining
5
No Ticket
Critical / no ITSM
Urgent — Expiring Soon
HostnameOwnerTeamEnv Days LeftExpiresCAStatus
Loading…
Certificate Inventory
HostnameOwnerTeamEnv Days LeftExpiresCAStatus
Loading…
Drop Your Spreadsheet Here
Drag & drop or click to browse — CSV, Excel, or Google Sheets export
.csv .xlsx .xls Google Sheets
Column Mapping 8 / 8 matched
Your ColumnSample ValueCertMgr FieldStatus
FQDNapi.payments.verizon.com✓ Matched
Cert OwnerR. Pacombe✓ Matched
BUPayments✓ Matched
Expire Date2026-03-23✓ Matched
CA VendorDigiCert✓ Matched
ENVPROD✓ Matched
ServiceNow#INC-92011✓ Matched
NotesAuto-renew blocked✓ Matched
4,821 rows detected · 8 columns mapped · Est. scan time 4h 20m
Connect Harper Agent
Harper Agent uses the Claude API to answer live cert queries in natural language.

Enter your Anthropic API key to enable it for this session. Don't have one? Get yours at console.anthropic.com — usage-based, no subscription required.
⚠ Key must start with sk-ant — check and try again.
🔒 Your key is stored in memory only and never sent anywhere except api.anthropic.com. It clears when you close this tab.
Harper Agent — CertManager
Harper Agent
Hi — I'm your cert inventory assistant. I can query any hostname, show expiring certs by team, check CA coverage, or help you prioritize renewal work. What would you like to know?
You
Show me all certs expiring in the next 30 days for the Payments team
Harper Agent
Found 18 certificates for the Payments team expiring within 30 days — 6 are critical (<14 days). Most urgent:
HostnameDaysCAStatus
api.payments.verizon.com5DigiCertCritical
payment-gateway.vz.com8SectigoCritical
checkout.verizon.com13DigiCertWarning
I'd recommend opening renewal tickets for the top 6 immediately. Want me to list all 18?
Suggested Queries
Which app owners have certs in critical status?
List all DigiCert certs in production
Certs expiring before April 1st with no ticket
Summary for Network Infrastructure team
When does auth.verizon.com expire?
Live Stats
Total4,821
Critical63
Warning156
Healthy4,602
4
Critical
< 14 days
3
Warning
14–30 days
5
No Ticket
assigned
2
Acknowledged
this week
Severity
Hostname
Owner / Team
Days Left
Expires
Ticket
Actions
Critical api.payments.verizon.com R. Pacombe · Payments 5 days Mar 23, 2026 — none —
Critical payment-gateway.vz.com R. Pacombe · Payments 8 days Mar 26, 2026 — none —
Critical auth.verizon.com T. Weston · IAM 7 days Mar 25, 2026 INC-92011
Critical cdn-edge.verizon.net K. Lin · Network Infra 9 days Mar 27, 2026 INC-91988
Warning checkout.verizon.com S. Patel · eComm 13 days Mar 31, 2026 — none —
Warning myaccount.verizon.com J. Torres · Consumer App 21 days Apr 8, 2026 INC-92244
Warning vpn-gateway.verizon.com L. Okafor · Network Infra 28 days Apr 15, 2026 — none —
Scan Schedule
Alert Thresholds
Integrations
Auto-Renewal
Organization
Scan Schedule
Automated Scanning
Enable nightly scan
Scans all hostnames every night and updates cert status
Scan time (UTC)
Daily scan window — low-traffic hours recommended
Scan frequency
How often to re-scan all hostnames
Scan concurrency
Parallel TLS connections per scan batch
Connection timeout
Per-host TLS handshake timeout (seconds)
sec
On-Demand Scanning
Allow manual scan trigger
Enables the "Run Scan" button in the topbar
Rate limit manual scans
Minimum minutes between manual scan triggers
min
✓ Saved
Alert Thresholds
Expiry Warning Levels
First notice — app owner
Initial email to cert owner with renewal instructions
days
Warning — escalate to team lead
Daily alerts begin; team lead CC'd on all notices
days
Critical — Slack + email daily
Slack channel alert + email, every 24hrs until renewed
days
Emergency — PagerDuty + ticket
PagerDuty alert fired; renewal ticket auto-created
days
Alert Behavior
Suppress staging/dev alerts
Skip PagerDuty and escalation for non-PROD environments
Business hours only
Warning-level alerts only fire M–F 9am–6pm local time
Auto-acknowledge on renewal
Clear alerts automatically when cert is renewed and scanned
✓ Saved
Integrations
Notification Channels
💬
Slack
● Connected — #cert-alerts
📧
Email (SMTP)
● Connected — smtp.verizon.com
🚨
PagerDuty
● Connected — CertMgr service
Ticketing
🎫
ServiceNow
● Connected — verizon.service-now.com
📋
Jira
○ Not connected
✓ Saved
Auto-Renewal
ACME / Let's Encrypt
Enable ACME auto-renewal
Automatically renew eligible certs via ACME protocol
Renewal lead time
Days before expiry to trigger auto-renewal
days
ACME directory URL
ACME v2 endpoint for your CA
✓ Saved
Organization
Instance Details
Organization name
Displayed in the sidebar and reports
Team name
Your security team identifier
Harper endpoint
HarperDB instance this app is connected to
localhost:9926
✓ Saved
days remaining
Validity
Expires
Issued
Last scanned
Ownership
Owner
Team
Environment
Certificate Details
Certificate Authority
Key
Auto-renewal
Operations
Ticket
Acknowledged