====== ABAP Certificates ======
  This monitor checks the expiration status of certificates in ABAP PSEs and raises
  alarms when the remaining validity reaches configured thresholds.

===== What Can Be Monitored =====
  * Expired certificates
  * Certificates about to expire within a configured number of days
  * Specific PSEs (or all PSEs) using pattern filters
  * Specific certificate entries using text filters

===== Configuration Hints =====
  * Matching is done per surveillance line (''PSE name'' + ''Cert. Filter'').
  * For each matching certificate entry, remaining days are calculated from certificate end date.
  * One non-aggregated alarm is generated per matching certificate when threshold is breached.
  * Alarm message includes PSE, expiration status, remaining/overdue days, threshold, and certificate text.
  * Date format can be forced with ''Date format''; otherwise it is auto-detected.
  * ''Metric'' column exists in configuration, but no metric is currently emitted by this monitor implementation.

===== Global Field =====
^ Field ^ Description ^ Default ^
| Date format (DD.MM.YYYY) | Optional explicit input date format for certificate date parsing. Accepted separators like ''/'' are normalized. If empty, format is auto-detected from returned certificate dates. | (empty) |

===== Surveillance Table =====
^ Field ^ Description ^ Default ^
| Active | ''true'' | Enables/disables this surveillance line. |
| PSE name | ''*''| Filter on PSE name (supports wildcard matching). |
| Cert. Filter | ''*''| Filter on certificate text line (supports wildcard matching). |
| Remaining days | ''90'' | Threshold expression evaluated against remaining days. Alarm triggers when remaining days are **less than or equal** to threshold. ''0'' disables alarming for the line. |
| Severity | MAJOR | Alarm severity used when threshold is breached. |
| Auto clear | ''true'' | If enabled, alarm is automatically cleared when condition is no longer met. |
| Alarm Tag | (empty) | Optional prefix/tag added to alarm message and alarm tag field. |
| Alarm | ''true'' | Enables/disables alarm generation for the line. |
| Metric | ''false'' | Enables/disables metric mode flag for the line. |
| Report | ''false'' | Enables/disables line in report mode. |

===== Threshold Format =====
''Remaining days'' supports:
  * Simple numeric threshold: ''90''
  * Transition format: ''G2W:90 W2M:60 M2C:30''

For this monitor, lower value is worse (fewer days remaining).

===== Example Configuration =====
^ Active ^ PSE name ^ Cert. Filter ^ Remaining days ^ Severity ^ Auto clear ^ Alarm Tag ^ Alarm ^ Metric ^ Report ^
| true | ''SSL Server Standard'' | ''*'' | ''90'' | ''4'' | true | ''ABAP_CERT'' | true | false | false |
| true | ''*'' | ''CN=*.company.com*'' | ''60'' | ''3'' | true | ''CERT_WEB'' | true | false | false |

===== Notes =====
  * In standard monitoring mode, certificate lookup is requested with a wide horizon (''S_LIMIT'' up to 365 days).
  * Alarm IDs are unique per monitor line, PSE, and certificate index to avoid collisions.