cloudek.
CLOUDEK · CERTIFICATE OPERATIONS

Certificate inventory analyzer

Import a certificate inventory CSV to create a suggested renewal calendar and see what the cited platform documentation says about automatic renewal or rotation.

How it works

Use the fixed sample columns to import certificate labels, platform, purpose, subject, issuer, expiry date and a planning lead time. The browser sorts the renewal calendar and compares platform entries with cited documentation; it does not contact your systems or verify your settings.

Import a certificate inventory

Local processing: the file is read in this browser tab and is not uploaded or stored by the tool. Certificate subjects and issuers can contain sensitive names; use a sanitized copy. The importer rejects the whole file if any cell or the raw CSV appears to contain private-key text, a PEM block, a PFX-style or long base64 blob. Do not paste or upload private keys, certificate contents or secrets.

Choose a CSV file to analyze it locally.

Required CSV columns

certificateLabel, platform, certificatePurpose, subject, issuer, notAfter, renewalLeadDays, certificateOrigin, autoCertificateRollover, applicationGatewaySku, keyVaultReference

Use the exact values shown in the synthetic sample CSV. The renewal lead defaults to 30 days when blank; it is a planning preference, not a platform recommendation. Include inventory metadata only—no private keys, key material or secret values.

Frequently asked questions

Does the analyzer accept private keys?

No. It rejects an import containing private-key text, PEM block markers or an obvious PFX/base64 blob. Remove that material before using the tool.

Is automatic renewal guaranteed by a platform label?

No. A status marked documented is conditional on the listed facts and the linked Microsoft documentation. The tool does not test your configuration or prove that a certificate will renew.

Are other load balancers and appliances assessed?

No generic automation claim is made. Check the official documentation for the exact product, model and certificate provider.

What the automatic-renewal status means

“Documented” means Microsoft describes the specific behavior and the CSV indicates the listed conditions. It does not test your setup. “Not confirmed” means the cited Microsoft pages do not establish automatic renewal for that platform or appliance. For other load balancers and appliances, verify the exact vendor and model documentation.

Microsoft pages checked 6 November 2026