TLS Cert Lifetime Lint - SC-081v3 renewal check

Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openssl -days, Terraform, cert-manager, late expiry alerts, HPKP, TLS 1.0/1.1, SHA-1, RSA-1024.

openssl req -x509 -newkey rsa:1024 -sha1 -days 365 -nodes -keyout edge.key -out edge.crt resource "tls_self_signed_cert" "edge" { validity_period_hours = 8760 } spec: duration: 8760h - alert: CertExpiringSoon expr: cert_expiry_days < 14 # runbook: public TLS certificates are valid for 398 days, so we renew once a year. Check this config