Security & SEO

    SSL Certificate Monitoring

    Track SSL certificate validity, expiry dates, and chain issues. Get warned 30, 14, and 7 days before certificates expire.

    Part of SSL certificate monitoring — the full answer, the facts and the alternatives in one place.

    Updated 2026-03-04
    1 min read
    SSL
    TLS
    certificate

    Quick answer

    How to monitor SSL certificate expiry?

    Lemwatch checks your certificate daily and alerts you 30, 14, 7 and 1 day before expiry so renewals never lapse.

    SSL Certificate Monitoring#

    Automatic Monitoring#

    LemWatch continuously monitors your SSL/TLS certificates and alerts you:

  1. 30 days before expiry — Warning alert
  2. 7 days before expiry — Critical alert
  3. Immediately if certificate becomes invalid

    4. What We Check#

  4. Certificate expiry date and days remaining
  5. Certificate chain validity (including intermediates)
  6. Protocol version (TLS 1.2+ required for security)
  7. Certificate transparency logs (detect unauthorised certificates)
  8. Issuer and subject details
  9. Mixed content (HTTP resources loaded on HTTPS pages)

    10. Common Issues#

  10. Expired certificate — Renew immediately. Enable auto-renewal with your provider (Let's Encrypt, Cloudflare, etc.)
  11. Mixed content — Your HTTPS site loads some resources over HTTP. Fix all resource URLs to use HTTPS
  12. Weak protocol — Disable TLS 1.0/1.1 and use TLS 1.2+ only
  13. Chain issues — Missing intermediate certificates cause trust errors in some browsers

    14. Certificate Transparency#

    LemWatch monitors CT logs to detect certificates issued for your domain that you didn't request — an early indicator of potential domain hijacking.

    Was this article helpful?

    Previous

    Security Headers Explained

    Next

    Understanding Your Security Grade

    Related Articles

    Security Headers Explained

    What security headers are, why they matter, and how to fix them.

    Setting Up Alerts

    Configure 11 notification channels — email, push, chat, on-call, and automation tools.

    How does Lemwatch track robots.txt changes?

    Lemwatch snapshots robots.txt on every check and alerts when disallow rules change, sitemaps disappear, or the file returns non-200.

    How does Lemwatch validate canonical URLs?

    Lemwatch checks every crawled page for a rel=canonical tag, verifies it resolves to a 200, and flags self-referencing errors or canonical loops.

    Back to Help Center