Certificate Expiry alert consists of following a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID/SUBCA/RA) e) Certificate remaining lifetime in seconds. f) Certificate subject-name When a certificate is reaching its expiry on the router, a trap will be sent to SNMP server at regular intervals starting from 60days to till 1week. From 1week onwards daily one trap will be sent with following information a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID) e) Certificate remaining lifetime. Alert will not be sent if trustpoint is configured with auto-enroll and corresponding shadow certificate/rollover certificate is present provided, shadow/rollover certificates start time is same/behind certificate end time. If shadow/rollover certificate start time is ahead of certificate end time, alerts will be continued to send because shadow certificate wont be valid from certificates expiry time. Expiry alerts will not be sent for trustpool certificates.
Status in source: current.
Names: ciscoPkiCertExpiryAlert
Technical details
{
"smi_kind": "NOTIFICATION-TYPE",
"definition": [
"ciscoPkiCertExpiryAlert",
"NOTIFICATION-TYPE",
"OBJECTS",
"{",
"certSerialNum",
",",
"certSubName",
",",
"certIssuerName",
",",
"certType",
",",
"certTpLabel",
",",
"certRemainingLife",
"}",
"STATUS",
"current",
"DESCRIPTION",
"\"Certificate Expiry alert consists of following a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID/SUBCA/RA) e) Certificate remaining lifetime in seconds. f) Certificate subject-name When a certificate is reaching its expiry on the router, a trap will be sent to SNMP server at regular intervals starting from 60days to till 1week. From 1week onwards daily one trap will be sent with following information a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID) e) Certificate remaining lifetime. Alert will not be sent if trustpoint is configured with auto-enroll and corresponding shadow certificate/rollover certificate is present provided, shadow/rollover certificates start time is same/behind certificate end time. If shadow/rollover certificate start time is ahead of certificate end time, alerts will be continued to send because shadow certificate wont be valid from certificates expiry time. Expiry alerts will not be sent for trustpool certificates.\"",
"::=",
"{",
"ciscoPkiMIBNotifs",
"2",
"}"
],
"syntax_tree": [
[
"Objects",
[
"certSerialNum",
"certSubName",
"certIssuerName",
"certType",
"certTpLabel",
"certRemainingLife"
]
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"Certificate Expiry alert consists of following a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID/SUBCA/RA) e) Certificate remaining lifetime in seconds. f) Certificate subject-name When a certificate is reaching its expiry on the router, a trap will be sent to SNMP server at regular intervals starting from 60days to till 1week. From 1week onwards daily one trap will be sent with following information a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID) e) Certificate remaining lifetime. Alert will not be sent if trustpoint is configured with auto-enroll and corresponding shadow certificate/rollover certificate is present provided, shadow/rollover certificates start time is same/behind certificate end time. If shadow/rollover certificate start time is ahead of certificate end time, alerts will be continued to send because shadow certificate wont be valid from certificates expiry time. Expiry alerts will not be sent for trustpool certificates."
],
null
]
}- Cisco
· Publisher's source file
· Archived source file
Source location: CISCO-PKI-MIB::ciscoPkiCertExpiryAlert.Source version and references
Downloaded: 2026-10-19T00:18:11.844382+00:00. SHA-256:
c500f67208529a7d581de03873967e08e74277f553d3ee6bf0de320eee5183c9{'kind': 'NOTIFICATION-TYPE', 'details': {'module': 'CISCO-PKI-MIB', 'imports': {'CISCO-SMI': ['ciscoMgmt'], 'SNMPv2-TC': ['DisplayString', 'TimeInterval'], 'SNMPv2-SMI': ['MODULE-IDENTITY', 'OBJECT-TYPE', 'Counter32', 'NOTIFICATION-TYPE', 'Integer32', 'Unsigned32'], 'SNMPv2-CONF': ['MODULE-COMPLIANCE', 'NOTIFICATION-GROUP', 'OBJECT-GROUP']}, 'smi_kind': 'NOTIFICATION-TYPE', 'definition': 'ciscoPkiCertExpiryAlert NOTIFICATION-TYPE\n OBJECTS {\n certSerialNum,\n certSubName,\n certIssuerName,\n certType,\n certTpLabel,\n certRemainingLife\n }\n STATUS current\n DESCRIPTION\n "Certificate Expiry alert consists of following\n a) Certificate Serial number\n b) Certificate Issuer-name\n c) Trustpoint name\n d) Type of certificate (i.e. CA/ID/SUBCA/RA)\n e) Certificate remaining lifetime in seconds.\n f) Certificate subject-name\n \n When a certificate is reaching its expiry on the router, a trap\n will be sent to SNMP server at regular intervals starting from\n 60days to till 1week. From 1week onwards daily one trap will be\n sent with\n following information\n \n a) Certificate Serial number\n b) Certificate Issuer-name\n c) Trustpoint name\n d) Type of certificate (i.e. CA/ID)\n e) Certificate remaining lifetime.\n \n Alert will not be sent if trustpoint is configured with\n auto-enroll and corresponding shadow certificate/rollover\n certificate is present provided, shadow/rollover certificates\n start time is same/behind certificate end time.\n \n If shadow/rollover certificate start time is ahead of\n certificate end time, alerts will be continued to send because\n shadow certificate wont be valid from certificates expiry\n time.\n \n Expiry alerts will not be sent for trustpool certificates."\n ::= { ciscoPkiMIBNotifs 2 }', 'syntax_tree': [['Objects', ['certSerialNum', 'certSubName', 'certIssuerName', 'certType', 'certTpLabel', 'certRemainingLife']], ['Status', 'current'], ['DESCRIPTION', 'Certificate Expiry alert consists of following a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID/SUBCA/RA) e) Certificate remaining lifetime in seconds. f) Certificate subject-name When a certificate is reaching its expiry on the router, a trap will be sent to SNMP server at regular intervals starting from 60days to till 1week. From 1week onwards daily one trap will be sent with following information a) Certificate Serial number b) Certificate Issuer-name c) Trustpoint name d) Type of certificate (i.e. CA/ID) e) Certificate remaining lifetime. Alert will not be sent if trustpoint is configured with auto-enroll and corresponding shadow certificate/rollover certificate is present provided, shadow/rollover certificates start time is same/behind certificate end time. If shadow/rollover certificate start time is ahead of certificate end time, alerts will be continued to send because shadow certificate wont be valid from certificates expiry time. Expiry alerts will not be sent for trustpool certificates.'], None], 'source_encoding': 'utf-8-sig'}, 'parser_version': 'mib-4'}