SSL Monitoring
exit1.dev automatically monitors SSL/TLS certificates for all HTTPS checks.
Automatic Monitoring
SSL monitoring is enabled by default for any check using an https:// URL. No additional configuration is required.
What’s Monitored
Certificate Details
exit1.dev tracks the following certificate information:
| Field | Description |
|---|---|
| Issuer | The Certificate Authority that issued the certificate |
| Subject | The domain the certificate is issued for |
| Valid From | Certificate start date |
| Valid To | Certificate expiration date |
Validation Checks
Each SSL check verifies:
- Certificate validity - Is the certificate currently valid?
- Certificate chain - Is the full chain of trust intact?
- Expiration - Is the certificate approaching expiration?
- Domain match - Does the certificate match the monitored domain?
Refresh Cycle
SSL certificate information is refreshed every 6 hours. This means:
- Certificate changes are detected within 6 hours
- Expiration warnings update every 6 hours
- New certificates are recognized after the next refresh cycle
SSL Alerts
SSL-related alerts include:
| Event | Description |
|---|---|
ssl_error | Certificate is invalid, expired, or has chain issues |
ssl_warning | Certificate is approaching expiration (repeats at 30, 14, 7, 3 and 1 days left) |
Expiry Reminders
An expiring certificate doesn’t get a single warning and then silence. exit1.dev sends an ssl_warning each time the certificate crosses a reminder point: 30, 14, 7, 3 and 1 days before expiry. If the certificate then expires or becomes invalid, you get an ssl_error.
Renewing the certificate stops the reminders. A check that is first seen inside the window (say, 10 days left) starts at the nearest reminder point and continues from there.
These alerts are sent through your configured alert channels (email, SMS, webhooks, Slack, Discord).
Ignoring Certificate Errors
By default an invalid certificate fails the check: the TLS handshake is rejected and the check goes down. For an internal tool or a home server with a self-signed or expired certificate, that is not what you want.
Turn on Ignore SSL errors in the check’s HTTP configuration (or set ignoreSslErrors: true through the API). The check then accepts any certificate, so it stays up as long as the server answers. SSL alerts are turned off for that check too. The certificate details are still recorded, and turning the option off later alerts you if the certificate is still bad.
Best Practices
- Monitor all production HTTPS endpoints
- Set up alert channels to receive SSL warnings before certificates expire
- Use Domain Intelligence for additional domain expiration tracking
- Review certificate details periodically in the dashboard