Organizations are often not aware of the scope or the validity status of their X.509 certificate deployments until it is too late. Organizations need to establish formalized plans and, if necessary, leverage available tools to minimize impacts. Key Findings ■ Many high-profile, externally facing and internally facing system outages are traced to unplanned X.509 certificate expiry. ■ While several offerings exist to discover X.509 certificates, most organizations rely on spreadsheet-based tracking methods and manual processes to keep track of certificates, [...]