@cksChris Siebenmann I read your post about tls certs. I think you have before mentioned that you use Prometheus? If so you should look into the blackbox_exporter. We use it to monitor the certs of our web services, of course there are more certs that web certs, but it at least handles those super well.
If you have a fediverse account, you can quote this note from your own instance. Search https://mstdn.party/users/sheep/statuses/115832556805832029 on your instance and quote it. (Note that quoting is not supported in Mastodon.)