ProfessorIf you're monitoring a windows environment, you may have another DS in your deployment "WinCertCheck" that is turned off by default. I have another thread on this forum with the changes that need to be made to make it work correctly, then just set it ti isWIndows() instead of false() in your appliesTo and you'll get a bit more data that allows for better diagnostics. It's MUCH more aggressive about finding certs on your systems than the SSL DS is... so bear that in mind, you'll need to take a while turning off certs that you don't need to monitor. At scale, this can be cumbersome. I'm working on a script that will help alleviate that part... (i.e. stop alerting on all instances with a given thumbprint).
