Abstract: In one embodiment, a system for managing secure communications includes an interface that may receive communication between a first endpoint and a second endpoint. A processor may identify a security certificate included in the communication and determine whether the identified security certificate has previously been stored in a certificate database. If the security certificate has not been previously stored in a certificate database, the processor may store the identified security certificate in the certificate database. The processor may also analyze parameters of the identified security certificate including a host device using the certificate, a network administrator responsible for the host device, an expiration date of the security certificate, and a certification authority issuing the security certificate.

Abstract: In one embodiment, a system for managing secure communications includes an interface that may receive communication between a first endpoint and a second endpoint. A processor may identify a security certificate included in the communication and determine whether the identified security certificate has previously been stored in a certificate database. If the security certificate has not been previously stored in a certificate database, the processor may store the identified security certificate in the certificate database. The processor may also analyze parameters of the identified security certificate including a host device using the certificate, a network administrator responsible for the host device, an expiration date of the security certificate, and a certification authority issuing the security certificate.