Monitor SSL certificates

Enable certificate monitoring

Project Admins can open the project, select Options > Manage Monitor, enable Certificate Monitor, and select Save changes.

DeployMonitor queues a certificate check when the feature is enabled and runs scheduled certificate checks daily.

Read certificate status

The Certificate Monitor card shows:

• Valid when the downloaded certificate is valid for the project host.
• Invalid when the certificate cannot be validated or downloaded.
• Pending before a result is available.
• An expiring state when a recorded certificate expires within 30 days.
• An expired state after its expiration date passes.

The card also shows the expiration date and certificate issuer. Dates are displayed in your profile timezone.

If a check fails, the card includes Certificate check failed and the recorded failure reason. Common causes include DNS problems, an unavailable TLS service, an invalid certificate, or a host that resolves to a blocked non-public address.

Configure renewal alerts

DeployMonitor supports certificate reminders:

• Certificate Renewal - 30 Days on the date 30 days before expiry.
• Certificate Renewal - 10 Days on the date 10 days before expiry.
• Certificate Expired Notification after the expiration date has passed.

Each matching alert is delivered once per member and channel for that certificate expiry date. Project Admins control which channels are available, and each member chooses their own enabled channels.

See Configure project alerts and notifications to enable App, Email, or SMS delivery.

After renewing a certificate

Allow the next daily certificate check to refresh the status, expiry date, and issuer. If certificate monitoring was disabled, enable it again to queue a new check.