TriggerVenafiReal-timeUpdated May 2026
How do I trigger when a Venafi certificate is about to expire?
Short answer: Drop the "Venafi → Certificate Expiring" trigger on your workflow canvas, add filters if you want them, and publish. It fires within seconds of the event in Venafi, not on a polling schedule.
Anatomy
What this trigger looks like in a workflow.
Drop it on the canvas. Configure a couple of fields. Publish.
In the builder
Trigger
Certificate Expiring
When the matching event happens
on certificate expiringwatch for certificate expiringwhen a certificate is about to expire in venafinew certificate expiringwhen certificate expiring
What this trigger returns
for the curiousYou don’t need to read this. Tiny Command auto-maps every field into the visual picker so downstream nodes can pull values by clicking. We show it here for power users who want to know what’s on the wire.
{"cn": "example.com","expires": "2026-05-11T00:00:00Z","days_remaining": 30}
Output shape
Fields available to downstream nodes.
Every field below can be referenced by name in any action or filter that comes after this trigger.
| Field | Type | Example |
|---|---|---|
| cn | string | "example.com" |
| expires | string | "2026-05-11T00:00:00Z" |
| days_remaining | number | 30 |
Pairs with
Drop these actions after Certificate Expiring.
FAQ
Questions about Certificate Expiring.
How does the Certificate Expiring trigger work in Venafi?
Fires when a certificate managed by Venafi is about to expire, on the lead-time threshold configured in your policy. Use it to auto-renew or to escalate to the security team.
Is the Certificate Expiring trigger real-time?
Yes. Certificate Expiring uses webhooks or push subscriptions, not polling. Your workflow fires within seconds of the event happening in Venafi.
What data does Certificate Expiring return?
The full event payload from Venafi. The output shape table on this page lists every field, its type, and an example value so you can map fields into downstream nodes.
Can I filter Certificate Expiring so only some events start a workflow?
Yes. Add a Filter node right after the trigger and match on any field, whether that's subject, sender, status, or anything else in the payload. Workflows only continue when the filter passes.
Do I need Venafi admin permissions to use Certificate Expiring?
For most Venafi accounts a standard user can authorize the trigger. Some Venafi plans require an admin to enable third-party webhooks. Check Venafi's docs if the trigger fails to register.
Build a workflow on this trigger.
One trigger. 2+ downstream actions. Zero glue.
