إنتقل إلى المحتوى الرئيسي

🔒 SSL Certificate Monitor

The SSL monitor connects to your server, reads the full SSL/TLS certificate chain, and alerts you before your certificate expires.


🎯 ما يفعله

  • Connects to the host and reads the full certificate chain
  • Records issuer, subject, SANs (Subject Alternative Names), and fingerprint
  • Calculates days until expiry
  • Sends alerts at a configurable warning threshold (e.g., 30 days before expiry)
  • Stores certificate data in the Monitron database for historical tracking

⚙️ التكوين

الإعدادالوصفالافتراضي
NameA friendly name
HostDomain to check
Warn Before Expiry (days)Alert this many days before expiry30

📖 أمثلة الاستخدام

Example 1: Monitor your main domain

الإعدادالقيمة
Nameexample.com SSL
Addressexample.com
Warn Before Expiry30 days
Interval1 hour

Example 2: Monitor a wildcard certificate

الإعدادالقيمة
Name*.example.com SSL
Addressapp.example.com
Warn Before Expiry14 days

📊 ما يتم تسجيله

البياناتالوصف
IssuerWho issued the certificate (e.g., Let's Encrypt)
SubjectThe domain the certificate is issued for
SANsAll domains covered by the certificate
Valid FromCertificate start date
Valid UntilCertificate expiration date
Days Until ExpiryCalculated days remaining
FingerprintSHA-256 fingerprint
ChainFull certificate chain data

⚠️ Alert Levels

الحالةالوضع
Certificate valid, > 30 days remainingUp
Certificate valid, ≤ 30 days remaining⚠️ Degraded (warning)
Certificate expiredDown
Connection failed / No certificateDown

💡 نصائح

  • Check frequency: SSL certificates don't change often. An hourly or every-6-hours interval is sufficient.
  • Let's Encrypt: If you use Let's Encrypt (90-day certificates), set the warning to 30 days. Certbot auto-renews at 30 days, so if you're still getting warnings at 14 days, renewal may be broken.
  • Multiple domains: Create separate SSL monitors for each domain, especially if they use different certificates.
  • View certificate details: Click on the monitor in the dashboard to see the full certificate information including the chain, SANs, and fingerprint.