SSL Certificate Monitoring
Last updated: 2026-04-24
SSL certificates keep your website secure, but they expire and can fail in other ways. Our SSL monitoring tool alerts you before expiration and highlights certificate health issues so you never have an unexpected security warning.
Why Monitor SSL Certificates?
| Problem | Impact |
|---|---|
| Expired certificate | Browsers show scary warnings, users leave |
| Broken HTTPS | Search rankings drop, trust is lost |
| Security vulnerability | Data could be intercepted |
| Manual tracking | Easy to forget renewal dates |
SSL monitoring prevents these problems by alerting you in advance.
Setting Up SSL Monitoring
- Go to Tools in the left menu
- Click SSL Monitors
- Click Add Domain
- Enter your domain name (e.g.,
example.com) - Click Save
We’ll immediately check your certificate and start monitoring.
What We Check
Each SSL check verifies:
| Check | Description |
|---|---|
| Certificate validity | Is the certificate valid and trusted? |
| Expiration date | When does it expire? |
| SAN coverage | Does the certificate cover all expected hostnames? |
| Chain completeness (paid) | Is the full certificate chain present and served correctly? |
| OCSP stapling health (paid) | Is OCSP stapling enabled and is the stapled response fresh? |
| Common issues | Domain mismatch, trust problems, weak configuration, and related issues |
All plans include certificate validity, expiration tracking, and SAN coverage checks.
Paid plans also include deeper certificate diagnostics such as chain completeness and OCSP stapling freshness.
Expiration Alerts
We’ll email you when your certificate is nearing expiration (based on days remaining):
- 30 days remaining
- 15 days remaining
- 5 days remaining
Once we detect your certificate has been renewed, we’ll send a confirmation email with the new expiration date.
SSL monitors are checked every 6 hours on a UTC-aligned schedule.
If your certificate remains invalid or expired for 15 consecutive checks, we’ll automatically disable the monitor (we won’t delete it). You can log in any time to re-enable it.
Understanding the Dashboard
Your SSL monitors show:
- Domain name - Which domain is being monitored
- Status - Valid, expiring soon, or expired
- Expires in - Days until expiration
- Certificate health details - SAN coverage status and, on paid plans, chain and OCSP details
- Last checked - When we last verified the certificate
Interpreting Results
| Status | Meaning | Action |
|---|---|---|
| Valid | Certificate is good | No action needed |
| Expiring Soon | Expires within 30 days | Plan renewal |
| Expired | Certificate has expired | Renew immediately |
| Invalid | Certificate has issues | Investigate and fix |
Common SSL Issues
Certificate Not Trusted
- The certificate authority isn’t recognized
- Intermediate certificates are missing
- Self-signed certificates aren’t trusted by browsers
Domain Mismatch
- Certificate was issued for a different domain
- Subdomain not covered by the certificate
- Need a wildcard certificate
Weak Encryption
- Using outdated encryption standards
- Key size is too small
- Upgrade to modern TLS settings
Adding Multiple Domains
Monitor all your domains:
- Add your main website
- Add API subdomains
- Add any other services with SSL
Each domain is checked independently.