LucidStack
Features
Solutions
Resources
Pricing

SSL/TLS certificates

No more expired certificates on a Monday morning.

Every HTTPS monitor checks your website's certificate. LucidStack warns you well before it expires, and immediately if it becomes invalid or changes issuer.

Free up to 10 monitors ·No credit card ·Hosted in Europe

Upcoming expiries

Certificates and domains of all your monitors

TLS certificate shop.example.com 11 d
TLS certificate api.example.com 74 d
Domain example.com 53 d
Domain example.fr 212 d

SSL certificate monitoring

Your certificates, with no nasty surprises

Built into every HTTPS monitor, with zero configuration.

Expiry reminders

Alerts 30, 14, 7 and 1 day before each certificate's expiry date.

Invalid certificate

Incomplete chain, hostname mismatch, expired certificate: the problem is reported immediately.

Issuer change

A certificate that switches certificate authority is flagged, useful for spotting an unexpected configuration.

Overview

All your certificate and domain deadlines in a single table, sorted by urgency.

Mail and WebSocket servers

The certificates of your mail servers and encrypted WebSockets are checked too.

Client reports

Deadlines appear in your monthly reports: your clients see that you are keeping watch.

Getting started

Nothing to configure

  1. 1

    Add an HTTPS website

    The certificate is checked automatically on every run.

  2. 2

    Choose your channels

    Expiry reminders go out on the same channels as your alerts.

  3. 3

    Renew on time

    You have at least 30 days to act.

Questions

SSL certificate monitoring FAQ

When am I notified?

30, 14, 7 and 1 day before expiry, then immediately if the certificate becomes invalid.

Are Let's Encrypt certificates supported?

Yes, all public certificates are checked, whatever their issuer. For Let's Encrypt, the reminders reveal a failed automatic renewal.

Do I need to create a special monitor?

No, every HTTPS monitor also monitors its certificate.

Are the certificates of my other services checked?

Yes, those of mail servers using STARTTLS or TLS and of encrypted WebSockets.

Start monitoring in two minutes.

Add a URL, choose where to be alerted. LucidStack takes care of the rest, day and night.