Avi Load Balancer has built-in certificate-expiration visibility. VMware Avi documentation states that when a certificate approaches expiration, the related Virtual Service can receive a security penalty; for example, at 30 days before expiration the Virtual Service incurs a 20-point security penalty, which caps the health score at 80. The UI also changes certificate status indicators as expiration approaches, and system events are generated at expiration thresholds such as 30 days, 7 days, and 1 day. Email notifications, however, depend on administrator notification settings and email configuration. Because email delivery requires additional configuration and is not simply enabled by default for administrators, the non-default method listed is sending emails before expiration.