Not to be mean, but you definitely had observability into the expiration date of your certificate. You just weren't monitoring it yet. What you are doing now with Prometheus sounds good.
If you need to figure out for yourself what to monitor about the service, including things AWS says it handles, it brings into question the value of the service.
