UI overview & navigation
How the CertAutoPilot web UI is laid out: the top navigation bar, the project selector that scopes almost everything, the sticky Settings sub-navigation, the user menu with the dark-mode toggle and built-in help pages, and how sessions refresh and expire.
Main dashboard
The first screen after login. A project-scoped overview of cert lifecycle health — counts by status, imminent renewals, distribution outcomes, pending approvals, expiring domains. Everything clickable drills into the appropriate filtered list.
7-Day readiness
A dashboard purpose-built for the CA/B Forum SC-081 shorter- lifetime roadmap. Certs are moving from ~398 days to ~100 and eventually to 47. That shift turns manual renewal processes into incident generators. The readiness score tells you how prepared your project is.
Jobs
Every asynchronous operation — issuance, renewal, distribution, discovery, notifications — runs as a job in the MongoDB-backed queue. The Jobs page is where you watch them run, read their logs live, retry the failed ones, and cancel the stuck ones.
Domains
Registrar-side expiry tracking plus a DNS hygiene watch. A perfectly automated certificate is worthless if the domain registration itself lapses or the zone is misconfigured — Domains keeps WHOIS expiry, DNSSEC, SPF/DMARC, transfer lock, dangling DNS, and CAA under periodic surveillance.
My Requests (approvals)
One page, two hats. Requesters track, cancel, and execute their approval requests for gated certificate operations; admins and owners review the queue and approve or reject with a comment. Requests expire after 7 days if nobody acts.
Profile & 2FA
Your own account: display name and email, password change for local accounts, and TOTP two-factor enrollment with recovery codes. LDAP-federated accounts manage identity in the directory; 2FA still works for them.
Certificates pages
A screen-by-screen tour of the certificate list (filters, CSV export, bulk renew), the four-step issue wizard, and the detail page with its action buttons, risk panel, timeline, dependency graph, and Distributions tab.
Discovery pages
The five discovery screens: sources (scan configuration and run-now), source detail with scan history, the inventory of discovered certificates and endpoints with PQC badges, security findings with acknowledge/suppress, and the manage wizard that turns a discovered certificate into a managed one.
Audit log pages
Browsing the audit trail in the UI: project vs organization scope, the action and actor filters, JSON/CSV export with date presets, and the entry detail with metadata, field-level changes, and old/new snapshots.