Why Monitor SSL Certificates?
- Expired certificates cause browser warnings and lost trust
- Many services reject connections to expired certificates
- Auto-renewal can fail silently
- Monitoring gives you time to fix issues
Creating an SSL Monitor
- Dashboard
- CLI
- API
- Go to Dashboard > SSL
- Click Add Domain
- Enter the domain to monitor
- Set alert threshold (days before expiry)
What We Check
Alert Thresholds
Configure when to receive alerts:Certificate Details
For each monitored domain, we track:Best Practices
Monitor all domains
Monitor all domains
Include subdomains, API endpoints, and any domain serving HTTPS traffic.
Set multiple thresholds
Set multiple thresholds
Alert at 30 days for awareness, 14 days for action, 7 days for escalation.
Monitor wildcard certs
Monitor wildcard certs
If you use
*.example.com, monitor the base domain.Test auto-renewal
Test auto-renewal
Even with Let’s Encrypt or similar, certificates can fail to renew.