Operations & Reliability
Why certificate inventory comes before certificate automation
You cannot renew what you cannot name. Inventory is the first control, not a dashboard decoration.
sslcertificates.io Editorial · Published 2026-09-21 · Fact-checked 2026-09-21 · Topic window 2026-09-17
Automation without inventory is a script that renews the certificates you remember. The outage is the hostname nobody listed: the VPN concentrator, the forgotten customer CNAME, the panel binding that is not in git.
Start with a list: hostname, notAfter, who owns DNS, where it is served, whether the platform issued it, whether a target is connected. Then automate the set you can name.
sslcertificates.io inventory is organization-scoped. You can import a hostname without taking a private key. You can record a Certificate Transparency observation you typed. That is not a network scan and not a live CT tail.
MSPs: one organization per client. Action Required is for failed renewals and disconnected targets — not a vanity green dashboard.
Sources
Related
Automate the lifecycle this article describes
Inventory, renewals and verified deployment are product surfaces — not adjectives.