runs:
    # Cloud Services
    - targets:
        # absearch
        - search.services.mozilla.com

        # AMO
        - addon.mozilla.org
        - addons.mozilla.org
        - blocklist.addons.mozilla.org
        - services.addons.mozilla.org
        - static.addons.mozilla.net
        - versioncheck-bg.addons.mozilla.org
        - versioncheck.addons.mozilla.org
        - compatibility-lookup.services.mozilla.com
        - discovery.addons.mozilla.org
        - addons.cdn.mozilla.net
        - addons-discovery.cdn.mozilla.net
        - addons-amo.cdn.mozilla.net

        # AMO Dev & Stage
        - addons-dev.allizom.org
        - addons.allizom.org
        - discovery.addons-dev.allizom.org
        - discovery.addons.allizom.org
        - services.addons-dev.allizom.org
        - services.addons.allizom.org
        - versioncheck-dev.allizom.org
        - versioncheck.allizom.org
        - addons-dev-cdn.allizom.org
        - addons-stage-cdn.allizom.org
        - addons-amo-dev-cdn.allizom.org
        - addons-amo-cdn.allizom.org
        - addons-discovery-dev-cdn.allizom.org
        - addons-discovery-cdn.allizom.org

        # Autograph
        - content-signature.cdn.mozilla.net
        - content-signature.stage.mozaws.net

        # Balrog
        - aus2.mozilla.org
        - aus5.mozilla.org
        - aus.mozilla.org

        # Buildhub2
        - buildhub.moz.tools

        # Cloudfront (Misc Static Sites)
        - fxpartners.mozilla.com
        - mitmdetection.services.mozilla.com

        # Conduit
        - api.lando.devsvcdev.mozaws.net
        - api.lando.services.mozilla.com
        - bugzilla.allizom.org
        - bugzilla.mozilla.org
        - lando.devsvcdev.mozaws.net
        - lando.services.mozilla.com
        - phabricator.allizom.org
        - phabricator-dev.allizom.org
        - phabricator.services.mozilla.com

        # Crash report (socorro)
        - crash-stats.mozilla.com
        - crash-stats.mozilla.org
        - crash-stats.allizom.org
        - crash-reports.mozilla.com
        - crash-reports.allizom.org

        # Detectportal
        - detectportal.firefox.com

        # elmo
        - l10n.mozilla.org
        - l10n.allizom.org

        # Firefox Accounts
        - accounts.firefox.com
        - api.accounts.firefox.com
        - oauth.accounts.firefox.com
        - profile.accounts.firefox.com
        - verifier.accounts.firefox.com
        - accounts-static.cdn.mozilla.net
        - accounts-static.stage.mozaws.net
        - firefoxusercontent.com
        - mozillausercontent.com
        - latest.dev.lcip.org

        # Firefox Settings (Kinto)
        - blocklists.settings.services.mozilla.com
        - firefox.settings.services.mozilla.com
        - webextensions.settings.services.mozilla.com

        # Firefox TV Redirects (Bug 1434653)
        - ftv.cdn.mozilla.net

        # Hopscotch
        - hopscotch.cdn.mozilla.net
        - hopscotch.services.mozilla.com
        - hopscotch-default.stage.mozaws.net
        - hopscotch-cdn-default.stage.mozaws.net

        # Locations
        - location.services.mozilla.com

        # Data Platform services
        - incoming.telemetry.mozilla.org
        - sql.telemetry.mozilla.org
        - docs.telemetry.mozilla.org
        - workflow.telemetry.mozilla.org
        - aggregates.telemetry.mozilla.org
        - reports.telemetry.mozilla.org
        - telemetry.mozilla.org
        - probeinfo.telemetry.mozilla.org
        - public-data.telemetry.mozilla.org
        - missioncontrol.telemetry.mozilla.org
        - data.mozilla.com
        - fhr.data.mozilla.com
        - telemetry-coverage.mozilla.org
        - coverage-bug1492656.mozilla.org

        # Misc
        - services.mozilla.com
        - status.services.mozilla.com
        - restmail.net
        - reaper.dev.mozaws.net
        - testrail.stage.mozaws.net
        - go.mozilla.org
        - getpocket.cdn.mozilla.net
        - img-getpocket.cdn.mozilla.net
        - hello.firefox.com

        # Normandy
        - normandy.cdn.mozilla.net
        - normandy.services.mozilla.com
        - classify-client.services.mozilla.com
        - self-repair.mozilla.org
        - normandy.stage.mozaws.net
        - normandy-cdn.stage.mozaws.net
        - normandy.dev.mozaws.net
        - normandy-cdn.dev.mozaws.net
        - normandy-mock.dev.mozaws.net

        # Premium Services
        - premium.firefox.com

        # Product Delivery
        - ftp.stage.mozaws.net
        - ftp.mozilla.org
        - archive.mozilla.org
        - releases.mozilla.org
        - releases.mozilla.com
        - download.mozilla.org
        - download-sha1.allizom.org
        - download-installer.cdn.mozilla.net
        - download-origin.cdn.mozilla.net
        - download-installer-origin.cdn.mozilla.net
        - download.cdn.mozilla.net
        - download-akamai.cdn.mozilla.net
        - download-cloudfront.cdn.mozilla.net
        - download-installer-cloudfront.cdn.mozilla.net
        - bouncer-bouncer.stage.mozaws.net
        - bouncer-bouncer-releng.stage.mozaws.net
        - bucketlister-delivery.stage.mozaws.net
        - bucketlister-delivery.prod.mozaws.net
        - admin-bouncer.stage.mozaws.net

        # Push
        - updates-partner-autopush.stage.mozaws.net
        - autopush.stage.mozaws.net
        - updates-autopush.stage.mozaws.net
        - autopush.dev.mozaws.net
        - updates-autopush.dev.mozaws.net
        - push.services.mozilla.com
        - updates.push.services.mozilla.com
        - ua.push.tefdigital.com

        # Releng Services
        - product-details.mozilla.org

        # Screenshots
        - pageshot.net
        - pageshot-usercontent.net
        - screenshots.firefox.com
        - screenshotscdn.firefox.com
        - screenshots.firefoxusercontent.com
        - screenshotscdn.firefoxusercontent.com
        - pageshot.stage.mozaws.net
        - pageshotcontent.stage.mozaws.net
        - screenshots.stage.mozaws.net
        - screenshotscdn.stage.mozaws.net
        - screenshotsusercontent.stage.mozaws.net
        - screenshotsusercontentcdn.stage.mozaws.net
        - screenshots.dev.mozaws.net
        - screenshotscdn.dev.mozaws.net
        - screenshotsusercontent.dev.mozaws.net
        - screenshotsusercontentcdn.dev.mozaws.net

        # Stub
        - stubattribution-default.stage.mozaws.net
        - stubdownloader.services.mozilla.com
        - cdn.stubdownloader.services.mozilla.com
        - stubdownloader.cdn.mozilla.net

        # Symbols (tecken)
        - symbols.mozilla.org
        - symbols.stage.mozaws.net
        - symbols.dev.mozaws.net

        # Sync
        - token.services.mozilla.com
        - sync-499-us-west-2.sync.services.mozilla.com
        - 401inator.sync.services.mozilla.com
        - eolinator.services.mozilla.com
        - sync-4-us-east-1.stage.mozaws.net

        # Taskcluster
        - firefox-ci-tc.services.mozilla.com
        - community-tc.services.mozilla.com
        - stage.taskcluster.nonprod.cloudops.mozgcp.net
        - firefoxci-websocktunnel.services.mozilla.com
        - community-websocktunnel.services.mozilla.com
        - websocktunnel-stage.taskcluster.nonprod.cloudops.mozgcp.net

        # Tiles
        - activity-stream-icons.services.mozilla.com
        - tiles.cdn.mozilla.net
        - tiles.services.mozilla.com

        # TLS Observatory
        - tls-observatory.services.mozilla.com
        - tls-observatory.stage.mozaws.net

        # Tracking protection
        - shavar.services.mozilla.com

        # Test Pilot
        - send.firefox.com
        - testpilot.firefox.com
        - send.stage.mozaws.net
        - testpilot.stage.mozaws.net

      assertions:
        - certificate:
            validity:
                notafter: ">35d"
      # every tuesday at 5:30pm
      cron: "30 17 * * 2"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # Cloud Services TLS monitoring, all sites that must match intermediate level
    - targets:
        #AMO
        - addon.mozilla.org
        - addons.mozilla.org
        - blocklist.addons.mozilla.org
        - services.addons.mozilla.org
        - static.addons.mozilla.net
        - versioncheck-bg.addons.mozilla.org
        - versioncheck.addons.mozilla.org
        - compatibility-lookup.services.mozilla.com
        - discovery.addons.mozilla.org

        # Balrog
        - aus5.mozilla.org

        # Firefox Settings (Kinto)
        - blocklists.settings.services.mozilla.com
        - firefox.settings.services.mozilla.com
        - webextensions.settings.services.mozilla.com

        # Normandy
        - normandy.cdn.mozilla.net
        - normandy-cloudfront.cdn.mozilla.net
        - normandy.services.mozilla.com
        - self-repair.mozilla.org
        - normandy.stage.mozaws.net
        - normandy-cdn.stage.mozaws.net
        - normandy.dev.mozaws.net
        - normandy-cdn.dev.mozaws.net
        - normandy-mock.dev.mozaws.net

        # Test Pilot
        - send.firefox.com
        - testpilot.firefox.com
        - send.stage.mozaws.net
        - testpilot.stage.mozaws.net

        # Push
        - push.services.mozilla.com
        - updates.push.services.mozilla.com

        # Screenshots
        - pageshot.net
        - pageshot-usercontent.net
        - screenshots.firefox.com
        - screenshotscdn.firefox.com
        - screenshots.firefoxusercontent.com
        - screenshotscdn.firefoxusercontent.com
        - pageshot.stage.mozaws.net
        - pageshotcontent.stage.mozaws.net
        - screenshots.stage.mozaws.net
        - screenshotscdn.stage.mozaws.net
        - screenshotsusercontent.stage.mozaws.net
        - screenshotsusercontentcdn.stage.mozaws.net
        - screenshots.dev.mozaws.net
        - screenshotscdn.dev.mozaws.net
        - screenshotsusercontent.dev.mozaws.net
        - screenshotsusercontentcdn.dev.mozaws.net

        # Tiles
        - tiles.cdn.mozilla.net
        - tiles.services.mozilla.com
      assertions:
        - analysis:
            analyzer: mozillaEvaluationWorker
            result: '{"level": "intermediate"}'
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # Cloud Services TLS monitoring, all sites that must match modern level
    - targets:
        # TLS Observatory
        - tls-observatory.services.mozilla.com
      assertions:
        - analysis:
            analyzer: mozillaEvaluationWorker
            result: '{"level": "intermediate"}' # should be modern once tls-observatory supports the modern level
        - analysis:
            analyzer: caaWorker
            result: '{"hasCAA": true, "host": "services.mozilla.com", "issue":["digicert.com"], "issuewild": []}'
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # absearch paging
    - targets:
        - search.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:Y2xvdWRvcHNAbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=

    # AMO paging
    - targets:
        - addon.mozilla.org
        - addons.mozilla.org
        - blocklist.addons.mozilla.org
        - services.addons.mozilla.org
        - static.addons.mozilla.net
        - versioncheck-bg.addons.mozilla.org
        - versioncheck.addons.mozilla.org
        - compatibility-lookup.services.mozilla.com
        - discovery.addons.mozilla.org
        - addons.cdn.mozilla.net
        - addons-discovery.cdn.mozilla.net
        - addons-amo.cdn.mozilla.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:bWFya2V0cGxhY2VAbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=

    # Autograph paging
    - targets:
        - content-signature.cdn.mozilla.net
        - content-signature.stage.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:Zm94c2VjQG1vemlsbGEuY29tCg==

    # Balrog paging
    - targets:
        - aus5.mozilla.org
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:YmFscm9nLXRsc0Btb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # BuildHub paging
    - targets:
        - buildhub.moz.tools
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:YnVpbGRodWIyQG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20=

    # Conduit paging
    - targets:
        - api.lando.devsvcdev.mozaws.net
        - api.lando.services.mozilla.com
        - bugzilla.allizom.org
        - bugzilla.mozilla.org
        - lando.devsvcdev.mozaws.net
        - lando.services.mozilla.com
        - phabricator.allizom.org
        - phabricator-dev.allizom.org
        - phabricator.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # Crash report paging
    - targets:
        - crash-stats.mozilla.com
        - crash-stats.mozilla.org
        - crash-reports.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c29jb3Jyb0Btb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29t

    #  Elmo paging
    - targets:
        - l10n.mozilla.org
        - l10n.allizom.org
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64ZWxtb0Btb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # everything.me paging
    - targets:
        - geodude.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:bG9jYXRpb25AbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=

    # Firefox Settings (Kinto)
    - targets:
        - blocklists.settings.services.mozilla.com
        - firefox.settings.services.mozilla.com
        - webextensions.settings.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:Y2xvdWRvcHNAbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=
    # Fxa paging
    - targets:
        - accounts.firefox.com
        - api.accounts.firefox.com
        - oauth.accounts.firefox.com
        - profile.accounts.firefox.com
        - verifier.accounts.firefox.com
        - accounts-static.cdn.mozilla.net
        - accounts-static.stage.mozaws.net
        - firefoxusercontent.com
        - mozillausercontent.com
        - latest.dev.lcip.org
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:ZnhhQG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20K

    # Locations paging
    - targets:
        - location.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:bG9jYXRpb25AbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=

    # Data Platform services paging
    - targets:
        - incoming.telemetry.mozilla.org
        - sql.telemetry.mozilla.org
        - docs.telemetry.mozilla.org
        - workflow.telemetry.mozilla.org
        - aggregates.telemetry.mozilla.org
        - reports.telemetry.mozilla.org
        - telemetry.mozilla.org
        - probeinfo.telemetry.mozilla.org
        - public-data.telemetry.mozilla.org
        - missioncontrol.telemetry.mozilla.org
        - data.mozilla.com
        - fhr.data.mozilla.com
        - telemetry-coverage.mozilla.org
        - coverage-bug1492656.mozilla.org
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:ZGF0YS1vcGVyYXRpb25zLWdlbmVyYWxAbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQ==

    # Misc paging
    - targets:
        - status.services.mozilla.com
        - services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # mitmdetection paging
    - targets:
        - mitmdetection.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:bWl0bWRldGVjdGlvbkBtb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29t

    # Normandy
    - targets:
        - normandy.cdn.mozilla.net
        - normandy.services.mozilla.com
        - classify-client.services.mozilla.com
        - self-repair.mozilla.org
        - normandy.stage.mozaws.net
        - normandy-cdn.stage.mozaws.net
        - normandy.dev.mozaws.net
        - normandy-cdn.dev.mozaws.net
        - normandy-mock.dev.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c2hpZWxkQG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20=

    # Screenshots
    - targets:
        - pageshot.net
        - pageshot-usercontent.net
        - screenshots.firefox.com
        - screenshotscdn.firefox.com
        - screenshots.firefoxusercontent.com
        - screenshotscdn.firefoxusercontent.com
        - pageshot.stage.mozaws.net
        - pageshotcontent.stage.mozaws.net
        - screenshots.stage.mozaws.net
        - screenshotscdn.stage.mozaws.net
        - screenshotsusercontent.stage.mozaws.net
        - screenshotsusercontentcdn.stage.mozaws.net
        - screenshots.dev.mozaws.net
        - screenshotscdn.dev.mozaws.net
        - screenshotsusercontent.dev.mozaws.net
        - screenshotsusercontentcdn.dev.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:dGVzdHBpbG90QG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20K

    #  Symbols (tecken) paging
    - targets:
        - symbols.mozilla.org
        - symbols.stage.mozaws.net
        - symbols.dev.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c3ltYm9sc0Btb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # Product Delivery paging
    - targets:
        - download.mozilla.org
        - download-installer.cdn.mozilla.net
        - stubattribution-default.stage.mozaws.net
        - stubdownloader.services.mozilla.com
        - cdn.stubdownloader.services.mozilla.com
        - stubdownloader.cdn.mozilla.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:cHJvZHVjdC1kZWxpdmVyeUBtb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # Premium Services paging
    - targets:
        - premium.firefox.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:cHJlbWl1bS1zZXJ2aWNlcy12cG5AbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQ==

    # Push paging
    - targets:
        - push.services.mozilla.com
        - updates.push.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c2ltcGxlcHVzaEBtb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # Sync paging
    - targets:
        - token.services.mozilla.com
        - sync-264-us-west-2.sync.services.mozilla.com
        - eolinator.services.mozilla.com
        - 401inator.sync.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c3luY0Btb3otc3ZjLW9wcy5wYWdlcmR1dHkuY29tCg==

    # Tiles paging
    - targets:
        - activity-stream-icons.services.mozilla.com
        - tiles.cdn.mozilla.net
        - tiles.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:dGlsZXNAbW96LXN2Yy1vcHMucGFnZXJkdXR5LmNvbQo=

    # TestPilot paging
    - targets:
        - send.firefox.com
        - testpilot.firefox.com
        - send.stage.mozaws.net
        - testpilot.stage.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:dGVzdHBpbG90QG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20K

    # Security services paging
    - targets:
        - tls-observatory.services.mozilla.com
        - tls-observatory.stage.mozaws.net
        - tigerblood.prod.mozaws.net
        - tigerblood.stage.mozaws.net
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - secops+tlsobs@mozilla.com
                  - cloud-ops@mozilla.com

    # Tracking protection paging
    - targets:
        - shavar.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "0 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:c2hhdmFyQG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20K

    # Cloud Services product delivery, must remain on the old config for XPSP2
    - targets:
        - download-sha1.allizom.org
      assertions:
        - analysis:
            analyzer: mozillaEvaluationWorker
            result: '{"level": "old"}'
      cron: "0 19 * * *"
      notifications:
          email:
              recipients:
                  - cloud-ops@mozilla.com

    # Julien's stuff
    - targets:
        - jve.linuxwall.info
        - vehent.org
        - j.vehent.org
        - securing-devops.com
        - ulfr.io
      assertions:
        - certificate:
            validity:
                notafter: ">7d"
        - analysis:
            analyzer: mozillaEvaluationWorker
            result: '{"level": "modern"}'
      cron: "0 0 * * *"
      notifications:
          email:
              recipients:
                  - julien@vehent.org

    # kang's stuff
    - targets:
        - insecure.ws
        - random.tzib.net
        - lesroutesduchocolat.fr
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
        - analysis:
            analyzer: mozillaEvaluationWorker
            result: '{"level": "modern"}'
      cron: "0 0 * * *"
      notifications:
          email:
              recipients:
                  - hostmaster@insecure.ws

    # Enterprise information security stuff
    - targets:
        # MIG's public API
        - api.mig.mozilla.org
        # Server Side TLS Configurations
        - statics.tls.security.mozilla.org
        - observatory.mozilla.org
      assertions:
        - certificate:
            validity:
                notafter: ">15d"
      cron: "13 13 * * *"
      notifications:
          email:
              recipients:
                  - infosec-tlsobs@mozilla.com

    # IT SRE
    - targets:
        - start.mozilla.org
      assertions:
        - certificate:
            validity:
                notafter: ">15d"
      cron: "13 13 * * *"
      notifications:
          email:
              recipients:
                  - hostmaster+tlsobs@mozilla.com

    # Taskcluster paging
    - targets:
        - firefox-ci-tc.services.mozilla.com
        - community-tc.services.mozilla.com
        - firefoxci-websocktunnel.services.mozilla.com
        - community-websocktunnel.services.mozilla.com
      assertions:
        - certificate:
            validity:
                notafter: ">14d"
      cron: "30 18 * * *"
      notifications:
          email:
              recipients:
                  - b64:dGFza2NsdXN0ZXItZmlyZWZveGNpQG1vei1zdmMtb3BzLnBhZ2VyZHV0eS5jb20K

smtp:
    host: gator1
    port: 25
    from: julien@linuxwall.info
    #auth:
    #    user: someuser
    #    pass: somepass

slack:
    # slackbot will send the notification to each run's specified channels
    # slackbot's username and icon can be customized below or left empty for slack's default
    username: tls-observatory
    iconemoji: ':telescope:'
    # webhook: https://hooks.slack.com/services/not/a/realwebhook
