Werk #22502: acme_certificates: Report expired certificates instead of crashing

Component

Checks & agents

Title

acme_certificates: Report expired certificates instead of crashing

Date

Sep 29, 2026

Level

Trivial Change

Class

Bug Fix

Compatibility

Compatible - no manual interaction needed

Checkmk versions & editions

3.0.0b1 Not yet released	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT
2.5.0p15	Checkmk Community, Checkmk Pro, Checkmk Ultimate, Checkmk Cloud, Checkmk Ultimate MT

If a certificate on an ACME Packet (Oracle) session border controller had already expired, the Certificate <name> service crashed with ValueError: Cannot render negative timespan instead of warning you about it.

Expired certificates are now reported as CRIT, stating how long ago they expired, e.g. Expired 1 year 126 days ago.

To the list of all Werks