ASAs send cert invitation emails for no apparent reason

[jaysoo]

Some VPN users received cert renewal emails from a couple of our ASAs, but I don't know why. I normally have the ASA send them manually as needed, but I didn't in this case. Only some users received the emails, not sure why that is either. Anyone have any ideas?

I'm running 5545-Xs and 5555-Xs running ASA version 9.12(4)24.

Thanks.

[MHM Cisco World]

Email send to user to reminder him that the cert. Is near to be expired and he need to get new cert.

Some not all user get this email' if you check the user that not receive email and user receive email are the expired date same ? I dont think so.

MHM

[jaysoo]

No, that's not it. Their certs expire next year. Unless the ASAs think that is near.

[MHM Cisco World]

Ok' the user use cert. Sigend by asa? 

Are SMTP server behind asa ?

How you know the email from asa ?

MHM

[jaysoo]

Yes, signed. I checked the ASA logs and I can see where the emails were sent. The SMTP server is outside the ASAs on another network. I checked that log too, everything looks legit.