SSL Monitoring

No outage is more avoidable than this one.

A certificate expiring is the one failure you always get warning about, as long as something is watching for it.

Included on every plan. Nothing here is an add-on.

SSL · api.acme.com:443

Renew before October 31

Degraded

DAYS TO EXPIRY 11 / 30

Certificate is trusted
Hostname matches api.acme.com
Chain complete, 2 intermediates
Expires in 11 days, under your 30-day threshold

Issued by Let’s Encrypt R3 · checked from 18 regions

SSL Monitoring, in detail.

Warned in days, not minutes

Set the threshold at 30 days, 14 or 7, and the check turns degraded while there is still time to renew. It only goes down once the certificate is actually invalid.

More than the expiry date

Trust, hostname match, and chain completeness are all verified. A certificate that is technically valid but missing an intermediate still breaks clients, and still gets flagged.

Every certificate, not just the main one

Point a check at any host and port. API endpoints, admin subdomains, mail servers, and the internal service that nobody remembered had its own certificate.

More than the expiry date

One check · as the probe returns it 59.1 ms

$ statuscheck check api.acme.com/health --region fra {  "location": "frankfurt",  "type": "http",  "target": "https://api.acme.com/health",  "up": true,  "status": 200,  "dns": 0.687,  "tcp": 9.433,  "tlsHandshake": 30.141,  "firstByte": 18.313,  "download": 0.11,  "total": 59.059,  "redirects": 0,  "assertion": true,  "sslExpiration": 57,  "sslNotAfter": "2026-10-31T21:41:26Z",  "date": "2026-09-04T12:41:07.617Z"}

timing waterfall, ms assertions region is stamped by the probe, never by the caller

The specifics

SSL monitor options

Written out in full, because “monitoring” means something different at every vendor.

Target: Host and port
Expiry warning: Threshold in days, degraded before down
Verified: Validity, trust, hostname match, chain completeness
Alerts: Dedicated webhook event for expiring certificates

Works with

Every part of StatusCheck is on every plan. These are the pieces this one talks to most.

Uptime Monitoring HTTP and API checks with assertions and a full timing waterfall Alerts Nine channels, signed webhooks, and no alert storms Incident Management Timelines, updates, and maintenance windows

Try it on your own endpoints.

StatusCheck opens in batches. Join the waitlist and we’ll email you once, when it’s your turn. The free plan needs no card.