How to monitor SSL certificate expiry

Updated October 23, 2026 1 min read

Every HTTPS check reads the certificate, so each Website or API monitor on an https:// address also watches when its certificate expires. There is no separate SSL monitor to set up.

How it works

  • Reminders go to the monitor’s alert channels 30, 14, 7 and 1 day before the certificate expires, and on the day.
  • The certificate turns amber under 30 days and red under 14.
  • With Verify TLS certificate on, which is the default, an expired, self-signed or mismatched certificate marks the monitor down.

Tips

  • If your certificates renew automatically, a reminder means the renewal failed.
  • Certificates belong to hostnames. Add a monitor for each one with its own certificate, such as shop.example.com and api.example.com.
  • The domain registration is a separate date. See how to monitor domain and SSL expiry.

More on SSL monitoring and SSL certificate expiry.

Was this article helpful?

Try it in your own workspace

14-day free trial · Then free on 5 monitors · No credit card

Still stuck?

Email support@uptimecheck.com and we will reply within 24 hours.

Automating it? The API reference covers the REST API, webhooks, cron job pings and MCP.