# Certificates The **Certificates** tab lists the certificates on a Windows device that are **expired** or that **expire soon**. An expired certificate can stop VPN, Wi-Fi, email signing or an application from working, so it is worth checking before users notice. The agent analyzes the certificate stores of the computer and of the user profiles. The header shows how many certificates are expired and expiring, how many were analyzed, and the warning period (90 days). | Column | Content | | --- | --- | | **Status** | **Expired** or **Expiring**, with the number of days. | | **Subject**, **Issuer** | Who the certificate belongs to and who issued it. | | **Scope** | **Machine** (the computer) or **User** (a user profile). | | **Store** | The certificate store, named by Windows in the language of the device. | | **Expiry** | Expiry date. | Filter by status and scope to focus on what matters, for example machine certificates that are about to expire. Many expired certificates in the trusted root store are old Microsoft and vendor roots that Windows keeps for compatibility: they are normal and need no action. To export the certificates of the whole fleet, see [Export](https://wiki.cyberguard.srl/dim/import-export/export.md).