A computer-implemented method for managing a distributed computing architecture , the method comprising: discovering a first security certificate within the distributed computing architecture that includes a first identifying label and a first expiration date; searching a storage repository for a second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data, wherein a plurality of security certificates reside within the storage repository , determining whether the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data resides within the storage repository; wherein determining that the second security certificate corresponds to the first security certificate comprises determining that the first identifying label associated with the first security certificate is equivalent to a second identifying label associated with the second security certificate; upon determining that the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data resides within the storage repository, deleting the second security certificate from the storage repository; and storing the first security certificate within the storage repository; and upon determining that the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data does not reside within the storage repository, storing the first security certificate within the storage repository. discovering a first security certificate within the distributed computing architecture that includes a first identifying label and a first expiration date; searching a storage repository for a second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data, wherein a plurality of security certificates reside within the storage repository , determining whether the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data resides within the storage repository; wherein determining that the second security certificate corresponds to the first security certificate comprises determining that the first identifying label associated with the first security certificate is equivalent to a second identifying label associated with the second security certificate; upon determining that the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data resides within the storage repository, deleting the second security certificate from the storage repository; and storing the first security certificate within the storage repository; and upon determining that the second security certificate that corresponds to the first security certificate and which has an expiration date earlier than the first expiration data does not reside within the storage repository, storing the first security certificate within the storage repository. <EOS>