Visibility to TLS certificates
The Certificate Inventory and Management application allows Discovery to automatically scan for certificates on specific ports through your existing CI-based Discovery schedules. In addition, you can create Discovery schedules to scan for specific URLs.
The ServiceNow Store regularly releases new applications and updates to ServiceNow applications. If you already have an application, you can download the latest version to enhance your existing experience with ServiceNow products. Features vary by release. The version number indicates which content and features are available in each release.
In Certificate Inventory and Management, you can add a list of imported certificates to Run Certificate Discovery via certificate file import, and scan for certificates from your Certificate Authority (CA) such as GoDaddy and DigiCert. You can also scan Sectigo and Entrust CAs.
The existing certificate authority patterns for DigiCert to collect the following fields as part of the CA Trust Certificate discovery. These fields are required to create an automated flow (request, renew, or revoke) for certificates discovered by Digicert CA Discovery and are stored in the Certificate Extensions [sn_disco_certmgmt_certificate_extension] table.
- Certificate Id
- Order id
- Thumbprint
- Serial Number
- Certificate Status
Using the Certificate Inventory and Management, you can Run Certificate Discovery via port scans. You can also Run Certificate Discovery via individual URL scans.
To Import Certificates or Discovery CA Trust with more than 1500 certificates, create the discovery schedule with more than one serverless patterns configured. Each pattern execution supports a maximum of 1500 certificates discovery.
[Omitted image "multiple-serverless-executions.png"] Alt text: execution pattern
To discover all the certificates, the limit (defaults to 1500) and start_offset (defaults to 0), must be configured accordingly. For example, to fetch up to 6,000 certificates, add four serverless patterns with start_offset 0, 1500, 3000, and 4500. Start_offset and limit parameters are configured as shown.
[Omitted image "execution-patterns-config.png"] Alt text: pattern config
--- title: Visibility to TLS certificates description: The Certificate Inventory and Management application allows Discovery to automatically scan for certificates on specific ports through your existing CI-based Discovery schedules. In addition, you can create Discovery schedules to scan for specific URLs. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/run-cert-discovery.html release: australia product: Discovery classification: discovery topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Configure, Certificate Inventory and Management, ITOM Visibility, IT Operations Management] --- # Visibility to TLS certificates The Certificate Inventory and Management application allows Discovery to automatically scan for certificates on specific ports through your existing CI-based Discovery schedules. In addition, you can create Discovery schedules to scan for specific URLs. The ServiceNow Store regularly releases new applications and updates to ServiceNow applications. If you already have an application, you can download the latest version to enhance your existing experience with ServiceNow products. Features vary by release. The version number indicates which content and features are available in each release. In Certificate Inventory and Management, you can add a list of imported certificates to [Run Certificate Discovery via certificate file import](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/run-cert-inventory-mgmt-import.md), and scan for certificates from your Certificate Authority \(CA\) such as GoDaddy and DigiCert. You can also scan Sectigo and Entrust CAs. The existing certificate authority patterns for DigiCert to collect the following fields as part of the CA Trust Certificate discovery. These fields are required to create an automated flow \(request, renew, or revoke\) for certificates discovered by Digicert CA Discovery and are stored in the Certificate Extensions \[sn\_disco\_certmgmt\_certificate\_extension\] table. - Certificate Id - Order id - Thumbprint - Serial Number - Certificate Status Using the Certificate Inventory and Management, you can [Run Certificate Discovery via port scans](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/run-cert-inventory-mgmt-ports.md). You can also [Run Certificate Discovery via individual URL scans](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/run-cert-inventory-mgmt-urls.md). To Import Certificates or Discovery CA Trust with more than 1500 certificates, create the discovery schedule with more than one serverless patterns configured. Each pattern execution supports a maximum of 1500 certificates discovery. \[Omitted image "multiple-serverless-executions.png"\] Alt text: execution pattern To discover all the certificates, the limit \(defaults to 1500\) and start\_offset \(defaults to 0\), must be configured accordingly. For example, to fetch up to 6,000 certificates, add four serverless patterns with start\_offset 0, 1500, 3000, and 4500. Start\_offset and limit parameters are configured as shown. \[Omitted image "execution-patterns-config.png"\] Alt text: pattern config
| title | Visibility to TLS certificates |
| description | The Certificate Inventory and Management application allows Discovery to automatically scan for certificates on specific ports through your existing CI-based Discovery schedules. In addition, you can create Discovery schedules to scan for specific URLs. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/run-cert-discovery.html |
| release | australia |
| product | Discovery |
| classification | discovery |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | ConfigureCertificate Inventory and ManagementITOM VisibilityIT Operations Management |