You can use certificate-related alerts to help plan and manage security enforcement.

The following alerts are available:
New Certificate Alert
Alerts subscribers when a file with a certificate for a publisher not previously listed on this server is discovered, and when a new certificate is imported directly into the Carbon Black App Control Server. By default, this alert is triggered when a new certificate for any publisher is detected. However, it can be configured to trigger only for new certificates for specific publishers.
Revoked Certificate Alert
Alerts subscribers when a certificate known to this Carbon Black App Control Server is revoked. By default, this alert is triggered when a certificate for any publisher is revoked. However, it can be configured to trigger only for specific publishers.

There is a special mail template for informing users about certificate discovery or revocation.

See Using App Control Alerts for more information about configuring, enabling, and responding to alerts.