Monitoring
Solutions
Resources
Free Tools
Pricing
Products / Server monitoring / SSL Certificate Monitoring
Certificate expiry and validity

SSL Certificate Monitoring

An expired certificate shows visitors a full-page security warning. Upzilla watches your certificates, including mail and other STARTTLS services, and warns you well before they expire.

9 check locations30 min–24 h check interval8 alert channels10 monitors free
example.com:443 · SSL
Certificatevalid
Expires in47 days
Alert threshold14 days
ProtocolSSL
Illustrative example of a check result.

Certificates expire. Surprises should not.

Automatic renewal fails more often than people expect: a changed DNS record, a broken cron job, a forgotten wildcard. The first sign is usually a customer seeing “Your connection is not private”.

A certificate monitor checks expiry on a schedule and alerts you a configurable number of days ahead, giving you time to fix renewal calmly instead of during an outage.

What Upzilla checks

Certificate monitoring is a low-frequency check by design: daily is plenty for most sites.

Expiry alerts

Set how many days before expiry you want to be warned.

More than HTTPS

Check SSL, SMTP, POP3, IMAP, FTP (STARTTLS), XMPP, IRC and LDAP (STARTTLS).

Any port

Monitor certificates on non-standard ports.

Multiple locations

See what different networks receive.

How it works

From sign-up to your first alert in a few minutes.

Enter the host

Website, mail server or any TLS service.

Set the threshold

Choose how early you want the warning.

Relax

Upzilla checks on schedule and alerts if renewal is at risk.

Settings you can control

Sensible defaults get you started; every option below can be tuned per monitor.

SettingWhat it does
Domain / IPThe host presenting the certificate.
PortPort for the certificate check.
Before expireHow many days before expiry to alert you.
ProtocolSSL, SMTP (STARTTLS), POP3 (STARTTLS), IMAP (STARTTLS), FTP (STARTTLS), XMPP, IRC or LDAP (STARTTLS).
FrequencyHow often the check runs: every 30 minutes to every 24 hours.
LocationsRun the check from one or several of 9 locations: Spain, France, United Kingdom, USA (New York, Los Angeles), Australia, Singapore, Japan and Germany.
NotificationsPick any of your pre-configured alert channels: e-mail, SMS, Telegram, Slack, Messenger, voice call, webhooks and more.
Status pageMake the statistics of this monitor public or private.
TagsGroup monitors with tags to keep large accounts tidy.
IP versionForce IPv4, IPv6, or let Upzilla use whichever is available.
Full setup guide in the documentation →

Common use cases

Websites and shops

Never show visitors a certificate warning.

Mail servers

Watch STARTTLS certificates on SMTP, POP3 and IMAP.

Many domains

Track dozens of certificates from one dashboard.

Client sites

Agencies protect every client certificate automatically.

Alerts where your team already is

Create as many notification methods as you like, even on the free plan.

Slack
Telegram
Telegram group
Facebook Messenger
Email
SMS
Voice call
Webhooks

Related monitors and tools

Uptime MonitoringHTTP(S) MonitoringMail Server MonitoringWhois MonitoringSSL Validation (free tool) →

Questions about ssl certificate monitoring

How early will I be warned?

You choose. The Before expire setting defines how many days ahead of expiry the alert is sent.

Does it check the whole certificate chain?

It verifies the certificate presented by the server and its expiry. For a deeper analysis, use our SSL validation tool.

Can I monitor mail server certificates?

Yes, choose the SMTP, POP3 or IMAP (STARTTLS) protocol.

Why not just trust auto-renewal?

Auto-renewal fails silently. Monitoring is the safety net that tells you it did.

Get warned before a certificate expires

No card required. 10 monitors of any type, free.

Create free account →