How to monitor TLS certificate expiry

Every HTTPS check reads the certificate, so each Website or API monitor on an https:// address also watches when its certificate expires. There is no separate SSL monitor to set up.

How it works

• Reminders go to the monitor’s alert channels 30, 14, 7 and 1 day before the certificate expires, and on the day.
• The certificate turns amber under 30 days and red under 14.
• With Verify TLS certificate on, which is the default, an expired, self-signed or mismatched certificate marks the monitor down.

Tips

• If your certificates renew automatically, a reminder means the renewal failed.
• Certificates belong to hostnames. Add a monitor for each one with its own certificate, such as shop.example.com and api.example.com.
• The domain registration is a separate date. See how to monitor domain and SSL expiry.

More on SSL monitoring and SSL certificate expiry.