From Dev.to
Read a TLS certificate expiry check without turning every failure into expired
A certificate monitor that reports “expired” whenever a command fails will eventually send you on the wrong investigation. A missing file, a TLS handshake failure and a certificate approaching its exp...