check-certificates: exclude certificates issued by SCEP

1 files changed, 2 insertions, 2 deletions

diff --git a/check-certificates b/check-certificates
index d5dce80..350adc7 100644
--- a/check-certificates
+++ b/check-certificates
@@ -25,7 +25,7 @@
   $LogPrintExit warning "Time is not yet synchronized." true;
 }
 
-:foreach Cert in=[ / certificate find where !revoked !ca expires-after<3w ] do={
+:foreach Cert in=[ / certificate find where !revoked !ca !scep-url expires-after<3w ] do={
   :local CertVal [ / certificate get $Cert ];
 
   :do {
@@ -91,7 +91,7 @@
   }
 }
 
-:foreach Cert in=[ / certificate find where !revoked expires-after<2w fingerprint~"."] do={
+:foreach Cert in=[ / certificate find where !revoked !scep-url expires-after<2w fingerprint~"."] do={
   :local CertVal [ / certificate get $Cert ];
 
   :local ExpiresAfter [ $FormatExpire ($CertVal->"expires-after") ];