SSL Certificate Monitoring Tools
Having a securely encrypted website is absolutely essential in today's digital landscape. A single SSL certificate issue can quickly erode your site's credibility and damage your reputation.
Rest assured that we prioritize your website's security. Our proactive approach means we will make every effort to notify you promptly of any potential SSL certificate issues before they even occur.
Stay ahead of the game and be the first to know with our vigilant monitoring!
Get alerts about SSL certificate errors
We perform full cURL requests on the URLs we monitor, just like consumer browsers do. We conduct a complete analysis of the SSL certificate, including its validity and security chains. The certificate analysis is performed every time your URL is checked for availability. We also verify if the certificate has not been revoked. In case of any problems with the certificate, you will be notified immediately. This even works for monitors on our free package.
For any current or future issue we encounter, we try to provide as much useful information as possible to help you resolve it. Thanks to using cURL, we provide its error code as well as a detailed description of the problem. This description can be found in the Events section of the corresponding monitor's statistics, allowing you to quickly identify and address the issue at hand.
Get notified about upcoming SSL certificate expiry
We have a separate system that monitors for certificates that are expiring in the near future. There is an option to be notified when any of your monitors' certificates are about to expire. Messages are sent once a day because they are alerts and not emergencies. But if you receive such a notification, we advise you to take immediate action.
In modern systems, certificates are most often automatically renewed 10 to 15 days before they expire. Therefore, we send a notification 7 days before the certificate expires. This is the period by which the certificate should have already been renewed. If it's not renewed by then, there's probably an auto-renewal issue that needs to be fixed.
We send another notification the day before the certificate expires. This is the last warning before the certificate completely expires. If not renewed, the next day the site will not load correctly. An insecure connection warning will appear. Our system will detect it and the monitor will be reported as down.
Subject Alternate Names (SANs) Monitoring (Under Construction)
Sometimes it happens that the certificate is partially renewed, meaning not all domains and subdomains (SANs) are listed in it.
For example, if you have a site at www.example.com, the certificate must include the following two SANs:
- example.com
- www.example.com
But there are cases where the certificate includes only one of the required domains (example.com). In this case, your site will not open when typing www.example.com.
The worst part is that such errors often go unnoticed. Auto-renewal systems in most cases do not report an error and consider the certificate renewal as successful, even though you actually received only a partial certificate.
Our system has an option to track the SANs in the certificate. You will be notified if any of them are missing after the certificate is renewed.