SSL Certificate Monitoring
An expired SSL certificate takes your site offline for all visitors and destroys search rankings. StackBloom Monitor checks your certificates daily and sends you alerts days or weeks before expiry — so you always have time to renew.
Step 1: Add a new monitor and select the SSL type
In your Monitor dashboard, click Add Monitor and chooseSSL Certificate from the monitor type dropdown. SSL monitors run independently from HTTP monitors — you can have one of each for the same domain to track both uptime and certificate health together.
- SSL monitors are available on all Monitor plans, including Basic
- You can add unlimited SSL monitors on Pro and above
- SSL monitors check once per day by default; this interval cannot be reduced
- Monitors can be grouped into teams or status pages alongside HTTP monitors
Step 2: Enter your domain name
In the Domain field, enter the hostname whose certificate you want to monitor. Enter only the domain — no https:// prefix or path required. ClickVerify to let Monitor confirm it can reach the certificate before saving.
- Monitor checks port 443 by default; enter a custom port if your HTTPS runs elsewhere
- Wildcard certificates are detected and reported as such in the certificate details panel
- Subdomain certificates (e.g.,
api.yourdomain.com) can be monitored separately - If verification fails, check that your server is reachable from external IP addresses
Step 3: Set the expiry alert threshold
Choose when you want to be alerted before the certificate expires. You can add multiple thresholds to receive a series of escalating reminders as the expiry date approaches.
- Recommended thresholds: 30 days, 14 days, and 7 days before expiry
- A 30-day first alert gives you plenty of time to renew with any registrar
- 7-day alerts are useful if your renewal process involves manual steps or approvals
- You also receive an immediate alert if the certificate becomes invalid for any reason mid-cycle
Step 4: Configure notification channels
Under Notifications, select which channels should receive the expiry alerts. Notifications go to the same channels you have configured for your other monitors, so any channel you've already set up is immediately available.
- Email — alerts delivered to one or more email addresses
- Slack — post to a channel or DM a specific team member
- SMS — text message alerts for urgent or on-call scenarios
- Webhook — POST to any URL for custom integrations with PagerDuty, Opsgenie, or your own system
Step 5: Review SSL certificate details in the monitor dashboard
After saving, open the monitor to view live certificate details fetched from your server. The detail panel shows everything you need to verify the certificate is correctly issued and will remain valid for the expected duration.
- Issued by — the Certificate Authority (e.g., Let's Encrypt, DigiCert)
- Valid from / Valid to — exact issuance and expiry dates with days-remaining countdown
- Subject — the domain(s) the certificate covers, including SANs
- Last checked — the timestamp of the most recent verification pass
💡 Tip: Set your first alert for at least 30 days before expiry. Most domain registrars and certificate providers take 1–5 business days to process renewals, and Let's Encrypt auto-renewals can silently fail if your web server configuration changes. A 30-day buffer gives you time to diagnose and fix any renewal issues without site downtime.