Certificates & domains
Catch expiring TLS certificates and lapsing domain registrations before they bite.
Two of the most common (and most embarrassing) outages are an expired TLS certificate and a lapsed domain. These monitors make sure neither sneaks up on you.
SSL / TLS certificate
Connects to your service, inspects the certificate chain, and tracks the things that matter:
- Days until expiry — the headline number, on an overview card.
- Issuer, subject and validity — who issued it and for what names.
- Chain validity — whether the presented chain is trusted and complete.
- TLS health — the negotiated TLS version and cipher suite. Servers that only accept outdated ciphers (no forward secrecy) are still monitored — we automatically fall back to a legacy-compatible handshake — and get flagged with a Legacy TLS badge so you know the server's TLS configuration needs updating.
Alert presets
- Certificate expiring — fire when fewer than N days remain (commonly 14 or 30). Set it well ahead of renewal.
- Certificate invalid — chain, hostname mismatch, or already expired.
Set the expiry warning comfortably before your renewal automation runs — that way the alert is an early heads-up, not a fire drill.
Domain expiry
Watches a domain's registration and tells you when it's approaching expiry, with a dedicated overview and an automatically-created Domain Expiry alert so protection is on from the moment you add the monitor.
- Days until expiry driven by registration data.
- Preset: domain expiring within your chosen window.
Together, the certificate and domain monitors cover the two clocks that can take your whole site offline without a single line of code changing.