Expiry dates are surfaced automatically during ingestion, and the compliance dashboard raises expiry alerts before a certificate lapses.
