SSL/TLS monitoring

Overview

Any HTTPS monitor also surfaces its certificate's expiry. The date is read from the certificate the server actually presents, so it reflects what visitors get.

Certificate tracking

For every HTTPS monitor, Checkmate shows:

• Certificate expiry — the date the presented certificate expires, with days remaining
• Domain expiry — the domain's registration expiry, shown alongside (see Domain expiry)

Both appear on the monitor's details page.

TLS errors fail checks

TLS problems fail the HTTPS check itself, so the monitor goes down and alerts fire on its notification channels:

• Expired certificates
• Certificate hostname mismatch
• Self-signed or untrusted certificates, unless Ignore TLS/SSL errors is enabled on the monitor
• Incomplete certificate chains

The check's failure message carries the TLS error, so alerts name the actual problem.

See also

• Creating HTTP monitors
• Custom CA trust