Tags give you a fast, flexible way to slice your certificate inventory without touching folder structures or ownership rules. Once you attach a tag to a certificate, every filter panel, bulk-action menu, and alert rule in the platform can target that group in one click.
Certificate Tags

​
What it is

Certificate tags are color-coded labels that belong to your workspace. You create them once in the tag catalog and then assign them to as many certificates as you like. Tags are many-to-many — a certificate can carry several tags, and a single tag can span thousands of certificates. Every create, rename, delete, and assignment change is written to your audit log.

​
When to use it

  • Mark certificates owned by a particular team or business unit so each team can filter the inventory to their own scope.
  • Tag certificates by environment (prod, staging, dev) to drive environment-specific alert rules.
  • Identify wildcard or third-party certificates that need manual renewal procedures.
  • Group certificates that share a common deployment window so you can bulk-renew them together.
  • Label certificates subject to a specific compliance framework for targeted export and reporting.

​
Set it up

1

Open the tag catalog

Go to Settings > Certificate Tags. You’ll see all existing workspace tags with their color swatches and how many certificates each one covers.
2

Create a tag

Click New tag, enter a name, pick a color, and click Save. Tag names are unique within your workspace and case-insensitive.
3

Assign a tag to a certificate

Open any certificate from Certificates, click the Tags chip area in the detail panel, type the tag name, and press Enter. You can assign multiple tags at once.
4

Assign in bulk

In the Certificates list, check the rows you want to tag, then click Add tag in the bulk-action toolbar that appears at the top of the table. The tag is applied to every selected certificate.

​
What you’ll see

After tagging, each certificate row in Certificates displays color-coded chips in the Tags column. The column header is filterable — select one or more tags from the dropdown to scope the entire list to only the matching certificates. The tag catalog shows the live certificate count so you can instantly see if a tag has drifted out of use.
Deleting a tag from the catalog removes it from every certificate it was assigned to. The deletion is recorded in the audit log and cannot be undone.

​
Tips

  • Use the certificate.tags field in Monitoring > Alert rules condition trees to send alerts only for certificates bearing a specific tag, rather than alerting on your entire inventory.
  • You can assign tags by name when calling the API — if the tag does not yet exist it is created and assigned in the same request. Full spec at API Reference.

Alert Rules

Target specific tag groups in alert condition trees.

Certificate Inventory

The primary surface where tag chips appear and filtering is applied.

Audit Logs

Every tag change is recorded with user and timestamp.