Certificate Cleanup

Concept

Certificate cleanup is a project-level setting that automatically removes expired certificates on a daily schedule. Over time, expired certificates accumulate and add clutter to your certificate inventory. Enabling cleanup keeps your project organized by periodically deleting certificates that have been expired for a configurable number of days.

Configuring Certificate Cleanup

To configure certificate cleanup, head to your Certificate Management Project > Settings > Certificate Cleanup.

Fields

• Enable toggle: Turns automatic cleanup on or off for the project. When disabled, no certificates are removed.
• Delete certificates N days after expiration: The number of days a certificate must be expired before it becomes eligible for deletion. For example, setting this to 3 means certificates are removed 3 days after their notAfter date. Accepts values between 1 and 30.

Options

• Skip Certificates with Active Syncs: When enabled, certificates that are synced to external services (e.g. AWS Certificate Manager, Azure Key Vault) are not removed. This prevents breaking active integrations that depend on the certificate.

Last Execution

After the cleanup job runs, the settings page displays:

• Status: Whether the last run succeeded or encountered errors.
• Last Run: The date and time of the last execution.
• Certificates Removed: The number of certificates deleted in the last run.

Permissions

Only project Admins can view and configure certificate cleanup settings.