---
title: "SSL Monitor"
description: "Expired SSL certificates are a common cause of downtime and loss of user trust. Browsers display warnings like \\\"Connection not secure\\\". Our SSL Monitor helps you proactively prevent this."
---

## How it works

The SSL Monitor regularly checks the configuration of your TLS/SSL certificate. It is often integrated into the Uptime Monitor but can also be configured separately.

## Monitored Metrics

### 1. Expiration (Expiry)
This is the most critical check. We alert you well before the expiration date so you can renew the certificate.

- **Notification**: By default, we remind you **30, 14, 7, and 1 day(s)** before expiration (configurable).

### 2. Validity & Chain of Trust
We check if the certificate:

- Is signed by a trusted Root CA.
- Has not been revoked (OCSP/CRL Check).
- Is issued for the correct hostname (domain).

## Troubleshooting

If we report an SSL error:

1. Check the expiration date.
2. Check if "Intermediate Certificates" are correctly installed (Chain incomplete error).
3. Ensure the hostname in the certificate (CN or SAN) matches the monitored URL.