Catch up on the latest product updates, best practices, and expert insights from the Checkmk Conference #12 – Watch the livestream recordings now
back to website

Werk #22303: Keep track of the certificates that are being issued

Component Core & setup
Title Keep track of the certificates that are being issued
Date Sep 15, 2026
Level Trivial Change
Class New Feature
Compatibility Compatible - no manual interaction needed
Checkmk versions & editions
3.0.0b1
Not yet released 		Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

The site now records every certificate issued: for agents registering for TLS, for relays, for the message broker, and for the site itself. Entries are appended to plain JSON-lines files under var/log, one per component:

  • agents-issued-certificates.jsonl
  • relays-issued-certificates.jsonl
  • messaging-issued-certificates.jsonl
  • sites-issued-certificates.jsonl

Each line records the time of issuance, the serial number, the SHA-256 fingerprint, the subject and DNS names, the validity period, and an identifier of the issuing CA.

These files are append-only, certificates issued before the update are not listed.

To the list of all Werks