跳到主要内容

🔒 SSL Certificate Monitor

The SSL monitor connects to your server, reads the full SSL/TLS certificate chain, and alerts you before your certificate expires.

🎯 功能说明​

  • Connects to the host and reads the full certificate chain
  • Records issuer, subject, SANs (Subject Alternative Names), and fingerprint
  • Calculates days until expiry
  • Sends alerts at a configurable warning threshold (e.g., 30 days before expiry)
  • Stores certificate data in the Monitron database for historical tracking

⚙️ 配置​

设置描述默认值
NameA friendly name—
HostDomain to check—
Warn Before Expiry (days)Alert this many days before expiry30

📖 使用示例​

Example 1: Monitor your main domain​

设置值
Nameexample.com SSL
Addressexample.com
Warn Before Expiry30 days
Interval1 hour

Example 2: Monitor a wildcard certificate​

设置值
Name*.example.com SSL
Addressapp.example.com
Warn Before Expiry14 days

📊 记录内容​

数据描述
IssuerWho issued the certificate (e.g., Let's Encrypt)
SubjectThe domain the certificate is issued for
SANsAll domains covered by the certificate
Valid FromCertificate start date
Valid UntilCertificate expiration date
Days Until ExpiryCalculated days remaining
FingerprintSHA-256 fingerprint
ChainFull certificate chain data

⚠️ Alert Levels​

条件状态
Certificate valid, > 30 days remaining✅ Up
Certificate valid, ≤ 30 days remaining⚠️ Degraded (warning)
Certificate expired❌ Down
Connection failed / No certificate❌ Down

💡 技巧​

  • Check frequency: SSL certificates don't change often. An hourly or every-6-hours interval is sufficient.
  • Let's Encrypt: If you use Let's Encrypt (90-day certificates), set the warning to 30 days. Certbot auto-renews at 30 days, so if you're still getting warnings at 14 days, renewal may be broken.
  • Multiple domains: Create separate SSL monitors for each domain, especially if they use different certificates.
  • View certificate details: Click on the monitor in the dashboard to see the full certificate information including the chain, SANs, and fingerprint.