Our certificates for product and subscription service expired on October 26, 2025.  ca.corp.redhat.com did not send any notifications (or if it did, I didn't receive them) alerting us to the upcoming expiration.

Done criteria: 

• A system is in place to monitor the certificates we use in vault and alert us 30, 20, 10, 5, 1 days before certificate expiration.  If ca.corp can do this and we just have something misconfigured, that's fine.  Otherwise, we need our own solution.  Hopefully something using app-sre's alerting framework or an openshift job run that we can put the results of on the grafana dashboard or something like that.  If we have to roll our own solution, that's going to be more involved.