diff --git a/pkg/vault-mon/pki.go b/pkg/vault-mon/pki.go
index f4aa117..31d7db0 100644
--- a/pkg/vault-mon/pki.go
+++ b/pkg/vault-mon/pki.go
@@ -152,7 +152,7 @@ func (pki *PKI) loadCerts() error {
 			pki.certs[cert.Subject.CommonName] = cert
 		}
 
-		if cert.NotAfter.Unix() > time.Now().Unix() {
+		if cert.NotAfter.Unix() < time.Now().Unix() {
 			pki.expiredCertsCounter++
 		}