We recently had a Clair cert expire and it wasn't not automatically rotated. We've since migrated the certs from DigiCert to AWS and expect AWS to autorotate the cert. We need to make sure there's a monitor and alert for certs so we're notified prior to expiration so we don't catch downtime. The ask here is to verify there is monitoring and alerting in place for cert expiration and if there isn't, implement it.