scottklement.com

I know we have the DCM, but there are also other key stores that can exist in other applications, like the Java Key Store, or even other web applications may have their own key stores. Does anyone have any recommendations on managing all of the possible SSL certs that will be expiring, other than an excel spreadsheet? Otherwise, is there a way to nominate the DCM as the only key store?

My personal preference is to write a program that checks them all for expiration and sends me a message letting me know when I have a month left.

If you want to change everything to use a DCM or another central key storage mechanism, you need to change the way the software is written. It sounds like your software is written by different companies -- you would have to talk to each one and see what they can do for you.