
I’m writing this from a “managers watching dashboards” perspective. A certificate that hit the >1 day remaining threshold was replaced 15 hours ago and still has the bright red warning that it’s only got 9 hours left.
My understanding is that you are only checking daily. I think that’s fine until we get close to the threshold where it’s likely that the certificate would be replaced.
My suggestion would be to begin to monitor the status of the certificate more aggressively at the point where you start alerting that expiration is looming.
This would allow the dashboard to clear the big red warning more quickly once it’s resolved so that folks in charge of watching dashboards would see that we’ve done the needful.
I’d propose a 4 hour interval at most, once you’ve begun to alert. I have to imagine that the cost would be negligable on a customer by customer basis, and would be happy to pay a couple dollars a year more for this enhancement.