Satellite certificates expire at 11:59:59 PM on the date listed in the certificate's expires field, and new certificates become active at 12:00:00 AM on their issued date.
A standard grace period of seven (7) days exists between the date of Satellite certificate expiration and when the Satellite becomes inactive. This grace period is provided in order for customers to contact Red Hat Support and obtain a new certificate. During the grace period, the following things happen:
The Satellite remains active.
Each user that logs into the Satellite sees a banner on their Overview page that explains that the Satellite certificate has expired.
Once a day, for all seven days, the Satellite Administrator's email receives notification that the certificate has expired.
When the grace period is over, the Satellite becomes unavailable: users will be unable to login to the web UI and all client-side tools will present an Expired Certificate message.
Finally, the Satellite Administrator receives a daily email alerting them that the certificate has expired.