Applications with certificates that are about to expire

Last updated Oct 17, 2026 Policies

AI summary

Rencore Governance detects Entra ID applications with certificates expiring in the next 30 days. Expired certificates prevent the app from signing in and cause integrations to fail, so upload a new certificate and switch the app to it.

Severity: High Operation Generally available

What it detects

Shows Entra ID applications where certificates expire in the next 30 days.

Why it matters

When a certificate expires, the application can no longer sign in with it, and the integrations and jobs that depend on the app stop working. A 30-day warning leaves time to renew without an outage. Tell the application owner, upload a new certificate, switch the app to it and then remove the old one.

The rule

Every Application registration that has any Registration Certificates where End date is up to 30 days ago

In Rencore Governance

Details

Applies to	Application registration
Connector	Entra ID
Severity	High
Category	Operation
Recommended	No
Recommended automation	None
License type	Standard

Other policies that check Application registration objects:

Applications with client secrets that are about to expire (High)
Applications with expired certificates (High)
Applications with expired client secrets (High)
Application registrations without owners (Medium)

Frequently asked questions

What does the applications with certificates that are about to expire policy detect?

The Applications with certificates that are about to expire policy shows Entra ID applications where certificates expire in the next 30 days.

Which objects does the applications with certificates that are about to expire policy check?

The Applications with certificates that are about to expire policy checks Application registration objects from the Entra ID inventory and reports each one that matches its rule as a violation.

How severe is a violation of the applications with certificates that are about to expire policy?

Violations of the Applications with certificates that are about to expire policy have High severity. The policy is in the Operation category.

Which module includes the applications with certificates that are about to expire policy?

The Applications with certificates that are about to expire policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.

Was this page helpful?