SSL certificate monitoring
Pingstack checks your certificate's expiry date every hour and warns you a set number of days before it runs out, so you hear about a failed auto-renewal before your users do.
How it works
- Add the hostname whose certificate you want to watch.
- Set the warning and critical thresholds in days before expiry.
- Route it to a notification group. Agencies often give each client its own group.
What you can configure
| Setting | What it does |
|---|---|
| Warning threshold | Days before expiry when the check turns degraded |
| Critical threshold | Days before expiry when the check fails |
| Notification groups | Who gets alerted, and how |
Pair it with domain expiry monitoring to cover both renewals a site depends on.
FAQ
Common questions
I use Let's Encrypt with auto-renewal. Do I need this?
Yes, because this is exactly what it catches. When a renewal fails silently (a changed DNS record, a broken hook, a full disk), you get a warning while there's still time to fix it.
How often are certificates checked?
Every hour, on every plan.
Can I get two warnings, say at 21 and 7 days?
Yes. Set a warning threshold and a lower critical threshold in days.
Add your first check free.
Free for 15 checks
No card needed
