This tracker gives PKI/CLM program managers, security engineers, and IT operations teams a single source of truth for certificate status, ownership, and crypto-agility readiness. Use it to:
- Log certificate details – owner, common name, SANs, issuing CA, key algorithm/size, and environment – in a consistent, filterable format.
- Monitor expiration automatically, with built-in color-coded status flags for certificates that are expired or expiring within 30 or 90 days.
- Assess post-quantum readiness by flagging which certificates rely on quantum-vulnerable algorithms (e.g. RSA, ECDSA) versus PQC-resistant ones (e.g. ML-KEM, ML-DSA).
