Usage: x509-certificate-exporter [flags] Prometheus exporter for X.509 certificates. Flags: -h, --help Show context-sensitive help. -C, --config=STRING Path to YAML config. If empty, search standard locations. -f, --watch-file=WATCH-FILE,... Watch a single PEM file. Repeatable. -d, --watch-dir=WATCH-DIR,... Watch all files in a directory (one level). -k, --watch-kubeconf=WATCH-KUBECONF,... Watch certificates embedded in a kubeconfig file. --watch-kube-secrets Enable Kubernetes secrets scanning. -b, --listen-address=STRING Listen address. --web.config.file=STRING Exporter-toolkit web configuration file. --probe.listen-address=STRING Listen address for a separate plain-HTTP server exposing only /healthz and /readyz. Useful when --web.config.file gates the main port with TLS / mTLS / basic_auth and kubelet probes can't reach it. --debug Enable debug logging. --profile Enable pprof endpoint on :6060. -v, --version Print version and exit.