Skip to main content

SSL Certificate Monitoring

AlertifyPro automatically monitors SSL certificates for any service configured with check_type: "SSL". Certificates are checked for validity and proximity to expiry.

How it works

Add a service with check_type: "SSL" and provide the domain as the endpoint:

POST /api/v1/services
Authorization: Bearer <token>
Content-Type: application/json

{
"name": "API TLS Certificate",
"endpoint": "api.yourapp.com",
"check_type": "SSL",
"check_interval_seconds": 3600
}
tip

SSL checks run less frequently than HTTP checks — once per hour (3600 seconds) is typically sufficient.

What's checked

The SSL probe (checker/tls.go) connects to the domain on port 443 and verifies:

  • TLS handshake succeeds
  • Certificate is not expired
  • Certificate expiry is not within the warning threshold (configurable via expiryWarningDays)

Status values:

StatusWhen
GREENCertificate valid and not nearing expiry
YELLOWCertificate nearing expiry (within warning threshold)
REDCertificate expired or TLS handshake failed

Viewing SSL certificates

GET /api/v1/ssl-certificates
Authorization: Bearer <token>

Returns a list of all SSL certificates AlertifyPro has tracked across your organization's SSL-type services:

[
{
"service_id": "uuid",
"domain": "api.yourapp.com",
"issuer": "Let's Encrypt",
"valid_from": "2026-01-01T00:00:00Z",
"valid_to": "2026-04-01T00:00:00Z",
"days_until_expiry": 29,
"status": "YELLOW"
}
]

Alert when certificates expire

Create an alert rule for SSL services so you're notified before expiry:

POST /api/v1/alert-rules
{
"service_id": "<ssl-service-uuid>",
"name": "SSL Near Expiry",
"severity": "warning"
}