StatusEagle
SSL certificate monitoring

SSL certificate monitoring, so expiry is never a surprise

An expired certificate takes a site fully offline: browsers block it and API clients refuse to connect. It’s also the most predictable outage there is. StatusEagle watches every certificate you monitor and warns you well before the date.

SSL · shop.example.com
Live check snapshot
Active
IssuerLet’s Encrypt R11
ValidYes, chain OK
Expiresin 41 days
Alerts at21 and 7 days

Example check · demo data

In brief

SSL monitoring checks a website’s TLS/SSL certificate on a schedule, tracking its expiry date, issuer and validity, and alerts you before the certificate expires or when it becomes invalid.

1

“We use auto-renew” is not a monitoring strategy

Automatic renewal with Let’s Encrypt or a cloud provider works almost all the time. The failures are what make SSL outages so frustrating, because nobody is watching:

The renewal cron job stopped after a server migration (put a heartbeat on it).
Renewal succeeded, but the web server was never reloaded, so it still serves the old certificate.
DNS moved to a new provider and the DNS-01 challenge now fails.
A certificate on a forgotten subdomain, load balancer or mail server was issued by hand two years ago.
Let’s Encrypt certificates last 90 days, and the industry is moving to shorter lifetimes, so renewals are only getting more frequent.
2

What StatusEagle checks

SSL checks are part of every HTTPS website monitor. There’s nothing extra to set up.

CheckWhy it mattersDays until expiryValidityIssuer
The obvious one. Alerts at the thresholds you choose
Catches invalid or broken certificates, not just expiring ones
Tells you who issued it, and whether that changed unexpectedly
3

Recommended alert thresholds

Auto-renewing certificates typically renew around 30 days before expiry. A 21-day warning means renewal has already failed at least once, which is exactly when you want to know.

Certificate typeFirst alertSecond alertAuto-renewed (90-day)Manually renewed (1-year)Certificates owned by a client or another team
21 days before expiry7 days
30 days14 days, then 7
45 days21 days
4

Find the certificates you forgot about

Every subdomain with its own certificate: app., api., status., mail.
Marketing microsites and campaign domains
Load balancers and CDN custom hostnames
Client sites, if you’re an agency. SSL expiry is one of the most common emergency calls
COMPLEMENTARY CHECKS

Related monitoring

Pair these monitoring checks to ensure complete stack coverage.

FAQ

Frequently asked questions

Still deciding? Start monitoring free and verify your first service in ~2 minutes.

SSL monitoring checks a site’s certificate regularly and alerts you before it expires or if it becomes invalid.

GET STARTED IN MINUTES

Your first monitor takes about two minutes.

Free plan: 10 monitors, 3 locations, 1 status page. No credit card.