SSL Monitoring
Track every certificate in one dashboard, and renew each one before a visitor ever sees a warning.
- Read every day, on any port
- Reminders 30, 15, 7 and 1 day before expiry
- Name mismatches and broken chains caught too
Trusted by teams at
All your certificates, and when each one expires
- 1
See every certificate's state
Which are valid, which expire soon and which are failing, in one list.
- 2
Know who issued each one
The issuer and expiry date of every certificate, so you know where to renew.
- 3
Renew before it matters
Reminders from 30 days out, and another as each deadline gets closer.
Certificates, watched properly
An expired certificate is the failure everyone knows. Mon watches for the rest of them too.
Hear before it runs out
A reminder 30, 15, 7 or 1 day before a certificate expires - whichever you chose - and another at each one after it.
- Reminders by email or in Slack
- Every channel once it expires or breaks
- Reminders reset for the next certificate
More than an expiry date
A certificate can be in date and still turn visitors away. Mon catches the other ways it fails, too.
- Issued for a different name than the server's
- Self-signed, or missing an intermediate
- No certificate presented at all
Everything the certificate says
Each certificate read fresh every day, with what it says about itself.
- Who it was issued to, and by whom
- When it became valid, and when it expires
- Days left, at a glance
Not just websites
Certificates guard more than port 443. An SSL monitor reads the one on any host and port.
- Mail servers on 993 and 465
- FTPS on 990, admin panels on 8443
- Every service on a server, each watched
Add a hundred in one go
Paste a list - host or host:port, one per line or straight from a spreadsheet - and get a monitor for each, all with the same reminders and alerts.
- URLs are read down to their host
- Port 443 where none is given
- Certificates you already watch are skipped
Works with the tools you already use
On Enterprise plans, connect your registrar or DNS host once and Mon imports every domain it finds, picking up new ones as you buy them. On every plan, hear about them where your team already talks.
Namecheap
Every domain registered in your Namecheap account.
Amazon Route 53
Every hosted zone in your AWS account.
Azure DNS
Every DNS zone in your Azure subscription.
Slack
Reminders and alerts posted to the channel of your choice.
Everything else your site depends on
The same account, the same alerts and the same dashboard, for every other check your site needs.
- Learn more
Website monitoring
Alerts the moment a site stops answering, from 7 locations.
- Learn more
Keyword monitoring
Alerts when a page stops showing - or starts showing - the words you choose.
- Learn more
Defacement monitoring
Alerts when a page stops looking like your site, judged in a real browser.
- Learn more
Domain expiration
Reminders before a domain lapses, and when its registrar changes.
- Learn more
Ping monitoring
Whether a server answers at all, and how quickly.
- Learn more
Port monitoring
Whether a port is open - or closed when it should be.
Frequently asked questions
Everything about keeping your certificates in date.
What is SSL monitoring?
It is a service that reads your servers' SSL/TLS certificates every day and warns you before any of them expire, so none runs out by accident. Mon also tells you when a certificate stops being trusted - issued for the wrong name, or with a broken chain - which browsers treat just as badly.
Is SSL monitoring free?
Yes. Mon's free plan includes 5 monitors, and each certificate you watch uses one, so you can monitor up to 5 certificates for free. Paid plans start at 10 monitors.
How often are certificates checked?
Once a day. A certificate changes at most a few times a year, so a daily read catches every renewal and every problem in good time.
When will I be reminded?
You choose: 30, 15, 7 or 1 day before a certificate expires, or any of them together. Reminders go by email or to Slack. A certificate that has expired or stopped being valid alerts every contact you choose - webhooks and SMS on paid plans included.
What happens when I renew a certificate?
The next daily check reads the new certificate and its expiry date, so you can see the renewal took, and the reminders reset for the new one. If it had already expired, contacts that get Monitor Up alerts hear it's back.
What problems does Mon catch besides expiry?
A certificate issued for a different name than the server's, a chain browsers don't trust - self-signed, or missing an intermediate certificate - and a server that doesn't present a certificate at all.
Can I monitor mail servers and other ports?
Yes. An SSL monitor reads the certificate on any host and port, so you can watch mail servers on 993 or 465, FTPS on 990 or an admin panel on 8443, as well as websites on 443.
What's the difference from SSL checks on a website monitor?
A website monitor checks a site is up every few minutes, and can warn about that site's certificate as it goes. An SSL monitor is just for the certificate, read once a day on any host and port - mail servers included. Both are on every plan, free included.
Why use an SSL monitoring service?
When a certificate expires, browsers show visitors a full-page warning and most of them leave; apps and APIs refuse to connect at all. Renewal emails go to whoever bought the certificate and automatic renewal fails silently, so an independent daily check is what catches it in time.
Can I add all my certificates at once?
Yes. Paste a list of servers - host or host:port, one per line or straight from a spreadsheet - and Mon adds an SSL monitor for each, skipping any you already watch.
Never let a certificate expire again
Add your certificates in a minute. The first 5 are free.