SSL certificate monitor

What it checks

Uptiva connects to the site and reads its certificate. The monitor is down when the certificate is invalid (for example expired or not trusted). It shows as Degraded when the certificate is valid but expires within your warning days.

When to use it

For every site whose certificate you renew yourself, or where automatic renewal could fail silently.

Create it

1. Open /app and click New monitor.
2. Under What to monitor choose SSL certificate.
3. Under Details enter a Name and the Site, for example https://example.com.
4. Under Rules set Warn when it expires within (days), 1 to 365.
5. Under Schedule pick Check every. Under Check from choose the regions.
6. Under Alerts, in Expiry alerts, tick the days you want to be told: 60, 30, 14, 7, 3 or 1 day before.
7. Click Create monitor.

Check interval

Options are 1 hour and 1 day; a new SSL monitor starts at 1 day. The shortest is 1 hour, because a certificate rarely changes.

What the monitor page shows

A Details card, Certificate section, from the latest check:

• Status (Valid or Invalid), self-signed, and the problem if there is one.
• Expires (with the days left), issued date, issuer, subject, common name, serial number, SHA-1 and SHA-256 fingerprints.

Alerts

Expiry alerts send a message the chosen number of days before the certificate expires (60, 30, 14, 7, 3 and 1 are the choices) and once more if it does expire. Each is sent once per expiry date; after a renewal the sequence starts over. With none ticked you are only told when the check fails. Quiet hours delay these alerts, maintenance does not. Other alert settings are in Alerts.

Common problems and limits

• Self-signed certificate. It is shown as self-signed and the monitor reports it as invalid.
• Renewed but still warned. The next check picks up the new certificate. Wait for the interval or check the Details card for the expiry date.