Can someone point me to how incidents are automatically created for expired certificates?

[SusanWinKY]

We are using the Certificate Inventory & Management module.  We need to update a few fields when an Incident is created for an expired certificate.  I have searched throughout our instance but cannot find where this is handled.  Can someone point me to it?  Thanks in advance.

[Vivektietsood]

• If a certificate is expired, a new incident is created if the expired certificate is not replaced.
• If a certificate is expired, only one incident is created for that certificate.
• To see the certificate incidents list, navigate to Service Desk > Incidents.

https://docs.servicenow.com/bundle/paris-it-operations-management/page/product/discovery/concept/cer...

This helps ? Please let me know. 

[SusanWinKY]

I've read the documentation; that's not what I am looking for.  I need the name of the business rule, flow, scheduled job, etc. that is responsible for creating the incident for an expired certificate.

[SusanWinKY · Accepted solution]

Please disregard; I found it!

Subflow: Certificate Notification (sn_disco_certmgmt.certificate_notification)

which is triggered by...

Scheduled Script Execution:  Certificate Notification