# Audit Logging: Indicate / Tag Audit Event when Private Key disclosure occurs

**URL:** <https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88>\
**Category:** Feature Requests\
**Tags:** cert-management\
**Created:** [October 15, 2026, 7:45am UTC](https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88 "2026-10-15T07:45:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sinnwise](https://yyz2.discourse-cdn.com/flex048/user_avatar/community.infisical.com/sinnwise/32/121_2.png) [@sinnwise](https://community.infisical.com/u/sinnwise)\
**Post date:** [October 15, 2026, 7:45am UTC](https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88/1 "2026-10-15T07:45:32Z")

</div>

Hey team,

We’re noticing in the Audit Logs that the Audit Event for “Export Certificate” with and without a private key shows no differences in the audit logs. Can we maybe have a separate audit event to notify when private key material is disclosed?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Jake-Infisical](https://yyz2.discourse-cdn.com/flex048/user_avatar/community.infisical.com/jake-infisical/32/40_2.png) [@Jake-Infisical](https://community.infisical.com/u/Jake-Infisical)\
**Post date:** [October 16, 2026, 9:52pm UTC](https://community.infisical.com/t/audit-logging-indicate-tag-audit-event-when-private-key-disclosure-occurs/88/2 "2026-10-16T21:52:15Z")

</div>

Hey Sinnwise, thanks for flagging this!

Exports that include the private key are logged separately as “Get certificate bundle” or “Export certificate as PKCS#12”. The catch is that the export window loads the key as soon as it opens, so the bundle entry can show up even when the key wasn’t used. This is why both cases look the same.

I’ve passed this along to the team and will keep you posted!

Thanks!

Jake