> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificate cleanup

> Automatically delete expired certificates to keep your inventory organized.

Automatically delete expired certificates in Infisical Certificate Management. Cleanup runs daily and deletes certificates that have been expired for a configurable number of days.

> [!NOTE]
>
> This setting is managed by product admins and applies to all certificates in Infisical Certificate Management.

## Configure certificate cleanup

**1. Navigate to settings**

Go to **Certificate Manager → Settings → Certificate Cleanup**.

**2. Enable cleanup**

Toggle **Enable** to turn on automatic cleanup.

**3. Set retention period**

Configure **Delete certificates N days after expiration**:

| Value | Behavior |
| - | - |
| `3` | Certificates are deleted 3 days after expiration |
| `7` | Certificates are deleted 7 days after expiration |
| `30` | Certificates are deleted 30 days after expiration |

> [!NOTE]
>
> Values must be between 1 and 30 days.

**4. Configure options**

| Option | Description |
| - | - |
| **Skip Certificates with Active Syncs** | Don't delete certificates that are synced to external services (AWS ACM, Azure Key Vault, etc.) |

> [!WARNING]
>
> Deleting synced certificates can break integrations. Enable this option if you use certificate syncs.

## Monitoring cleanup

After the cleanup job runs, the settings page displays:

| Field | Description |
| - | - |
| **Status** | Whether the last run succeeded or failed |
| **Last Run** | Date and time of the last execution |
| **Certificates Removed** | Number of certificates deleted |

## Permissions

Only **Product Admins** can configure certificate cleanup settings.

## What's next?

> [card] [Certificate Policies](https://infisical.com/docs/documentation/platform/pki/settings/policies.md)
>
> Define constraints for certificates.

> [card] [Certificate Profiles](https://infisical.com/docs/documentation/platform/pki/settings/profiles.md)
>
> Create profiles that link CAs with policies.

> [card] [Managing Certificates](https://infisical.com/docs/documentation/platform/pki/applications/certificates.md)
>
> View and manage certificates in Applications.

> [card] [Certificate Syncs](https://infisical.com/docs/documentation/platform/pki/applications/certificate-syncs/overview)
>
> Push certificates to cloud destinations.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.