We have the same scenario. Anyone get an official answer yet?

Not yet but I did open a support case just now. I'll post when I find out something.

Below is the response I got back from the ServiceNow Technical Support Engineer. Based on this, I'm just going to disable the notification option on this mentioned certificate so that we don't continue to get notified.

Hello Chris ,

We are placing this issue in Solution Proposed.

Reason: The information provided below should answer the questions presented in this case.

Issue: ServiceNow X.509 Certificate is about to expire

Solution Proposed:

Please be assured the x.509 email is just an awareness notification and the renewal of the SSL certificate is automated by our development team.

This certificate is used in the Key Management Framework (KMF) code signing feature if com.snc.kmf.signature.validation.flag is set to true in the instance:

Some FAQs regarding this certificate and code signing:
1) Why is the 'code_signing_key_rome_publiccodesignver' certificate notification not important and can be ignored?

The "com.snc.kmf.signature.validation.flag" property is marked as false in the instances mentioned, therefore the business has not opted in to use the functionality.

https://YOUR_INSTANCE_HERE.service-now.com/sys_properties_list.do?sysparm_query=nameSTARTSWITHcom.sn...

2) Why did this notification appear if the business does not use this functionality?

The notification comes from backend logic that applies to all certificates on the instance, whether it is enabled or disabled.

3) How & when would the certificates be renewed if applicable?

The certificates are related to the release, therefore, with each upgrade a new certificate is generated & directly correlates with the version of the instance. For example, if you decides to upgrade to Vancouver, the instance will receive a Vancouver certificate.

4) What is code signing functionality exactly?

This can be explained in :

https://docs.servicenow.com/bundle/tokyo-platform-security/page/administer/encryption/concept/code-s...

In summary, You don't need to take any action at this time. The certificate renewal is handled by ServiceNow internally with each version release. Please ignore this expiry notification for it will not impact code signing or validation of signatures.

Next Steps:

Moving your case to Solution Proposed state and Feel free to accept to move this case to the closed state.

Received the exact same response from support a few minutes ago.

We opened a ticket with ServiceNow and got  different, conflicting advice.  We're following up with a new ticket with a link to this discussion to see if we a matching response.