Certmonger

• “D-Bus-based service which attempts to simplify interaction with certifying authorities (CAs) on networks which use public-key infrastructure (PKI).”

• Track the expiry and notify early

• Automatically obtain a new certificate via FreeIPA

• Certificate and key storage

• PEM or NSSDB