SSL Monitoring

No outage is more avoidable than this one.

A certificate expiring is the one failure you always get warning about, as long as something is watching for it.

Start free Sign in

Free plan, no card needed.

SSL · api.acme.com:443

Renew before October 31

Degraded

DAYS TO EXPIRY 11 / 30

Certificate is trusted
Hostname matches api.acme.com
Chain complete, 2 intermediates
Expires in 11 days, under your 30-day threshold

Issued by Let’s Encrypt R3 · checked from 5 regions

SSL Monitoring, in detail.

Warned in days, not minutes

Set the threshold at 30 days, 14 or 7, and the check turns degraded while there is still time to renew. It only goes down once the certificate is actually invalid.

More than the expiry date

Trust, hostname match, and chain completeness are all verified. A certificate that is technically valid but missing an intermediate still breaks clients, and still gets flagged.

Every certificate, not just the main one

Point a check at any host and port. API endpoints, admin subdomains, mail servers, and the internal service that nobody remembered had its own certificate.

More than the expiry date

One check · as the probe returns it 59.1 ms

$ statuscheck check api.acme.com/health --region fra {  "location": "frankfurt",  "type": "http",  "target": "https://api.acme.com/health",  "up": true,  "status": 200,  "dns": 0.687,  "tcp": 9.433,  "tlsHandshake": 30.141,  "firstByte": 18.313,  "download": 0.11,  "total": 59.059,  "redirects": 0,  "assertion": true,  "sslExpiration": 57,  "sslNotAfter": "2026-10-31T21:41:26Z",  "date": "2026-09-04T12:41:07.617Z"}

timing waterfall, ms assertions region is stamped by the probe, never by the caller

The specifics

SSL monitor options

Written out in full, because “monitoring” means something different at every vendor.

Target: Host and port
Expiry warning: Threshold in days, degraded before down
Verified: Validity, trust, hostname match, chain completeness
Alerts: Dedicated webhook event for expiring certificates

Works with

Every part of StatusCheck is on every plan. These are the pieces this one talks to most.

Uptime Monitoring HTTP and API checks with assertions and a full timing waterfall Alerts Email, Slack, Teams and six more, with no alert storms Incident Management Timelines, updates, and maintenance windows

Try it on your own endpoints.

The free plan needs no card. Add a monitor, pick the regions, and see the first check in under a minute.

Start free Sign in