Is there a best practice for monitoring certificate file expiration data via FleetDM? Our users have a certificate in their home folder that we need to monitor.

what format is your cert in? the standard certificates table can take a path as condition and the

not_valid_after

is the expiration. you could do something like

select * from certificates where path like '/Users/%/path_to_cert' and not_valid_after < ...

Hi folks! I'm not familiar with the specific files that you're working with, but I'd start looking with the cryptoinfo table (https://fleetdm.com/tables/cryptoinfo#linux) and see if that does the trick.