# Identify Expired Certificates

**URL:** <https://community.cloudquery.io/t/identify-expired-certificates/1210>\
**Category:** Queries & Insights\
**Tags:** aws, queries\
**Created:** [August 6, 2025, 7:49am UTC](https://community.cloudquery.io/t/identify-expired-certificates/1210 "2025-08-06T07:49:10Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pilvikala](https://sea1.discourse-cdn.com/flex001/user_avatar/community.cloudquery.io/pilvikala/32/11_2.png) [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Post date:** [August 6, 2025, 7:49am UTC](https://community.cloudquery.io/t/identify-expired-certificates/1210/1 "2025-08-06T07:49:10Z")

</div>

Expired SSL certificates can lead to service disruptions and security vulnerabilities. Here’s a PostgreSQL query that you can use to find all expired certificates from your AWS CloudQuery sync.

```sql
SELECT
    account_id,
    arn,
    domain_name,
    not_after,
    status
FROM
	aws_acm_certificates
WHERE status = 'EXPIRED' 
ORDER BY
	not_after ASC

```