SSL Certificate Monitoring
Track SSL certificate validity, expiry dates, and chain issues. Get warned 30, 14, and 7 days before certificates expire.
SSL Certificate Monitoring
Automatic Monitoring
LemWatch continuously monitors your SSL/TLS certificates and alerts you:
- 30 days before expiry — Warning alert
- 7 days before expiry — Critical alert
- Immediately if certificate becomes invalid
What We Check
- Certificate expiry date and days remaining
- Certificate chain validity (including intermediates)
- Protocol version (TLS 1.2+ required for security)
- Certificate transparency logs (detect unauthorised certificates)
- Issuer and subject details
- Mixed content (HTTP resources loaded on HTTPS pages)
Common Issues
- Expired certificate — Renew immediately. Enable auto-renewal with your provider (Let's Encrypt, Cloudflare, etc.)
- Mixed content — Your HTTPS site loads some resources over HTTP. Fix all resource URLs to use HTTPS
- Weak protocol — Disable TLS 1.0/1.1 and use TLS 1.2+ only
- Chain issues — Missing intermediate certificates cause trust errors in some browsers
Certificate Transparency
LemWatch monitors CT logs to detect certificates issued for your domain that you didn't request — an early indicator of potential domain hijacking.