TLS Certificate Expiry: Detection, Renewal, and the 47-Day Future

2d ago · 12 min read · The cert expired on a Saturday at 02:14 UTC — not a Tuesday, not during business hours. That's when I learned our paging rotation had a gap between outgoing and incoming on-calls. By the time we deployed a valid cert, we'd lost 97 minutes of checkout...