TriggerVenafiReal-timeUpdated June 2026

How do I trigger when a Venafi certificate is about to expire?

Short answer: Drop the "Venafi → Certificate Expiring" trigger on your workflow canvas, add filters if you want them, and publish. It fires within seconds of the event in Venafi, not on a polling schedule.

Use this trigger All 1 Venafi triggers

Anatomy

What this trigger looks like in a workflow.

Drop it on the canvas. Configure a couple of fields. Publish.

In the builder

Trigger

Certificate Expiring

When the matching event happens

on certificate expiringwatch for certificate expiringwhen a certificate is about to expire in venafinew certificate expiringwhen certificate expiring

What this trigger returns

for the curious

You don’t need to read this. Tiny Command auto-maps every field into the visual picker so downstream nodes can pull values by clicking. We show it here for power users who want to know what’s on the wire.

{
  "cn": "example.com",
  "expires": "2026-05-11T00:00:00Z",
  "days_remaining": 30
}

Output shape

Fields available to downstream nodes.

Every field below can be referenced by name in any action or filter that comes after this trigger.

Field	Type	Example
cn	string	"example.com"
expires	string	"2026-05-11T00:00:00Z"
days_remaining	number	30

Pairs with

Drop these actions after Certificate Expiring.

Add Labels to Message

Gmail · Email

Add Reaction

Slack · Communication

Add Sheet Tab

Google Sheets · Spreadsheets & Databases

Create Company

HubSpot · CRM & Sales

FAQ

Questions about Certificate Expiring.

How does the Certificate Expiring trigger work in Venafi?

Fires when a certificate managed by Venafi is about to expire, on the lead-time threshold configured in your policy. Use it to auto-renew or to escalate to the security team.

Is the Certificate Expiring trigger real-time?

Yes. Certificate Expiring uses webhooks or push subscriptions, not polling. Your workflow fires within seconds of the event happening in Venafi.

What data does Certificate Expiring return?

The full event payload from Venafi. The output shape table on this page lists every field, its type, and an example value so you can map fields into downstream nodes.

Can I filter Certificate Expiring so only some events start a workflow?

Yes. Add a Filter node right after the trigger and match on any field, whether that's subject, sender, status, or anything else in the payload. Workflows only continue when the filter passes.

Do I need Venafi admin permissions to use Certificate Expiring?

For most Venafi accounts a standard user can authorize the trigger. Some Venafi plans require an admin to enable third-party webhooks. Check Venafi's docs if the trigger fails to register.