Why Monitor SSL Certificates?
- Expired certificates cause browser warnings and lost trust
- Many services reject connections to expired certificates
- Auto-renewal can fail silently
- Monitoring gives you time to fix issues
Creating an SSL Monitor
- Dashboard
- API
- Go to Dashboard > SSL
- Click Add Domain
- Enter the domain to monitor
- Set alert threshold (days before expiry)
What We Check
| Check | Description |
|---|---|
| Expiration date | Days until certificate expires |
| Certificate chain | All certificates in the chain are valid |
| Domain match | Certificate matches the domain |
| Issuer | Certificate authority information |
Alert Thresholds
Configure when to receive alerts:| Days Before Expiry | Recommended For |
|---|---|
| 30 days | Standard alert |
| 14 days | Urgent reminder |
| 7 days | Critical warning |
Certificate Details
For each monitored domain, we track:Best Practices
Monitor all domains
Monitor all domains
Include subdomains, API endpoints, and any domain serving HTTPS traffic.
Set multiple thresholds
Set multiple thresholds
Alert at 30 days for awareness, 14 days for action, 7 days for escalation.
Monitor wildcard certs
Monitor wildcard certs
If you use
*.example.com, monitor the base domain.Test auto-renewal
Test auto-renewal
Even with Let’s Encrypt or similar, certificates can fail to renew.