=========================================
  Certificate Expiry Check
=========================================
Date:         2026-04-14 08:45:37 CEST
Grace Period: 30 days
Log File:     cert-expiry-check-20260414-084537.log
Cleanup Mode: dryrun

Counting CA certificate files...
Found 66 CA certificate files
Counting CSR certificate files...
Found 0 CSR certificate files


=========================================
  CA Certificates Check
=========================================

[prd] CA Certificates (16 total):
  ❌ server-cert.prd.bahn.business-2025.0-b_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.prd.bahn.business-2025.0-bw_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.prd.bahn.business-2025.0_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.prd.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.prd.bahn.business-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.business-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.business-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.prd.bahn.business-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.prd.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.prd.bahn.services-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.services-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.prd.bahn.services-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.prd.bahn.services-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.prd.bahn.services-2027.0_cert.pem (657 days remaining)

[abn] CA Certificates (16 total):
  ❌ server-cert.abn.bahn.business-2025.0-b_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.abn.bahn.business-2025.0-bw_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.abn.bahn.business-2025.0_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.abn.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.abn.bahn.business-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.business-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.business-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.abn.bahn.business-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.abn.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.abn.bahn.services-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.services-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.abn.bahn.services-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.abn.bahn.services-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.abn.bahn.services-2027.0_cert.pem (657 days remaining)

[tst] CA Certificates (12 total):
  ✅ server-cert.tst.bahn.business-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.business-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.business-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.tst.bahn.business-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.tst.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.tst.bahn.services-2026.0-b_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.services-2026.0-bw_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.tst.bahn.services-2027.0-b_cert.pem (657 days remaining)
  ✅ server-cert.tst.bahn.services-2027.0-bw_cert.pem (657 days remaining)
  ✅ server-cert.tst.bahn.services-2027.0_cert.pem (657 days remaining)

[pen] CA Certificates (6 total):
  ❌ server-cert.pen.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.pen.bahn.business-2025.pen_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.pen.bahn.business-2026.0_cert.pem (293 days remaining)
  ✅ server-cert.pen.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.pen.bahn.services-2026.0_cert.pem (293 days remaining)
  ✅ server-cert.pen.bahn.services-2027.0_cert.pem (657 days remaining)

[int] CA Certificates (6 total):
  ❌ server-cert.int.bahn.business-2025.0_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ❌ server-cert.int.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.int.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.int.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.int.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.int.bahn.services-2027.0_cert.pem (657 days remaining)

[lup] CA Certificates (5 total):
  ❌ server-cert.lup.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.lup.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.lup.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.lup.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.lup.bahn.services-2027.0_cert.pem (657 days remaining)

[pres] CA Certificates (5 total):
  ❌ server-cert.pres.bahn.business-2025.db_cert.pem (EXPIRED 72 days ago - DELETE CANDIDATE)
  ✅ server-cert.pres.bahn.business-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.pres.bahn.business-2027.0_cert.pem (657 days remaining)
  ✅ server-cert.pres.bahn.services-2026.0_cert.pem (292 days remaining)
  ✅ server-cert.pres.bahn.services-2027.0_cert.pem (657 days remaining)

=========================================
  CSR Certificates Check
=========================================

Note: This may take 30-60 seconds for large CSR sets...

=========================================
  Summary
=========================================

CA Certificates:
  Checked:       66 / 66 files
  Total:         66
  ✅ Valid:        52 (78.8%)
  ⚠️  Grace (<30d): 0 (0.0%)
  ❌ Expired (>30d): 14 (21.2%)

CSR Certificates:
  Total:         0
  ✅ Valid:        0 (-nan%)
  ⚠️  Grace (<30d): 0 (-nan%)
  ❌ Expired (>30d): 0 (-nan%)

=========================================
  Check Complete
=========================================

Log saved to: cert-expiry-check-20260414-084537.log