Monitoring client certificate expirations can be challenging, but Grafana Labs offers a solution that leverages Grafana and Prometheus to make certificate status visible and observable. Joe Elliott describes how he designed the cert-exporter tool to expose information about certificates that are not supported by the standard Prometheus blackbox exporter, such as x509 certificates on disk, certificates embedded in kubeconfig files, and those stored in Kubernetes secrets. This tool is particularly beneficial for tracking certificates in kops-based Kubernetes clusters, allowing administrators to manage certificate rotations proactively and avoid outages. A Grafana dashboard complements cert-exporter by visually representing certificate statuses, highlighting those nearing expiration, and displaying an error counter, ensuring administrators can address potential issues promptly.