CERTS.

22 TLS certificates across edges, services, and internal endpoints. 4 expiring within 14 days without ACME automation. 1 issued by a CA distrusted in Chrome since 2024.

TLS expiry doesn't care that the on-call engineer is in PTO.

TLS-011 · partner-api.example.com EXPIRES 7D

Manual renewal · last renewed by engineer who left in March.

Renew + migrate to ACME automation, assign owner.