SSL & TLS Certificate Management
 

Hi Fellow Padawan's i require some guidance or help with a coming project - it's my first one of this kind.

We manage about 600-800 wordpress websites and currently our certificate management needs improvement.

1- What would be the best way to monitor a list of all the certificates we have ?
2- How will we know who owns each one ?
3- Where is the certificates loaded ?
4- When will it expire ?
5- Most importantly the certificate, is of sufficient quality ? How would i determine this ?

We use OS Ubuntu 14.04

We can generate our own Certificates OR we use the Certificate our clients purchase to use.

We have all our servers & websites monitored by Nagios.

What would be the best way going about being proactive and managing this broad base of certificate without them expiring and cause the client productive issues ?

Thanks

So what have you done so far and what are your thoughts on each point?

What can you do besides create a database in which to store them, and keep the information in it up-to-date?