You can view events which are associated with file-signing certificates on the Events page in the console and also in the Syslog output.

The event description for certificate-related events includes the Subject Name. On the console Events page, Subject Name is a link to the Certificate Details page.

The following are event subtypes (the unique Carbon Black App Control identifier for an event) for certificates:
Discovery events
These are events that have to do with the certificates themselves, independent of their Carbon Black App Control state.
Policy Enforcement events
These are events that report addition or removal of an Carbon Black App Control ban or approval for a certificate.

See Event Reports for more information about viewing events in the Carbon Black App Control Agent. See the VMware Carbon Black App Control Events Guide for details about events.