I am running KMP 7.

From when I setup with KMP a couple of years ago, I have had the 'Group Certificates By CommonName' option in Certificate History enabled. It seems to work fine but occasionally we do not get a notice of a cert expiration on a system because the cert is renewed on CA and the new cert becomes the managed cert.

I am considering turning off 'Group Certificates By CommonName' to help eliminate this issue but want to hear if anyone has had issues doing this.

I think it will, instead of grouping by CN, it will group by SN.

Will the grouped by CN cert go away when the grouped by SN is discovered?

I am concerned it may cause my license count to increase substantially although working with the Deployed Servers report we may almost break even in the long run.

Any other gotchas that anyone knows of?