handler, ok := rm.certificates[name]
	if !ok {
		return false, errors.Errorf("%s is not a known certificate", name)
	}

	return handler.readwriter.Exists()
}

// GetCertificateExpirationInfo returns certificate expiration info.
// For PKI certificates, use the name defined in the certsphase package, while for certificates

	info := &outputapiv1alpha3.CertificateExpirationInfo{}

	for _, handler := range rm.Certificates() {
		if ok, _ := rm.CertificateExists(handler.Name); ok {
			e, err := rm.GetCertificateExpirationInfo(handler.Name)
			if err != nil {
				return nil, err
			}
			info.Certificates = append(info.Certificates, outputapiv1alpha3.Certificate{
				Name:                e.Name,