---
title: "SSL Certificate Monitoring — Lemwatch Help"
description: "Track SSL certificate validity, expiry dates, and chain issues. Get warned 30, 14, and 7 days before certificates expire."
canonical: "https://lemwatch.com/help/ssl-monitoring"
source: "https://lemwatch.com"
---

# SSL Certificate Monitoring

> Track SSL certificate validity, expiry dates, and chain issues. Get warned 30, 14, and 7 days before certificates expire.

## SSL Certificate Monitoring

### Automatic Monitoring

 LemWatch continuously monitors your SSL/TLS certificates and alerts you:

- 30 days before expiry — Warning alert

- 7 days before expiry — Critical alert

- Immediately if certificate becomes invalid

### What We Check

- Certificate expiry date and days remaining

- Certificate chain validity (including intermediates)

- Protocol version (TLS 1.2+ required for security)

- Certificate transparency logs (detect unauthorised certificates)

- Issuer and subject details

- Mixed content (HTTP resources loaded on HTTPS pages)

### Common Issues

- Expired certificate — Renew immediately. Enable auto-renewal with your provider (Let's Encrypt, Cloudflare, etc.)

- Mixed content — Your HTTPS site loads some resources over HTTP. Fix all resource URLs to use HTTPS

- Weak protocol — Disable TLS 1.0/1.1 and use TLS 1.2+ only

- Chain issues — Missing intermediate certificates cause trust errors in some browsers

### Certificate Transparency

 LemWatch monitors CT logs to detect certificates issued for your domain that you didn't request — an early indicator of potential domain hijacking.


## Related

- [Help centre](https://lemwatch.com/help)
- [Security Headers Explained](https://lemwatch.com/help/security-headers)
- [Setting Up Alerts](https://lemwatch.com/help/alert-setup)
- [Understanding Your Security Grade](https://lemwatch.com/help/security-grade)
- [SEO Health Monitoring](https://lemwatch.com/help/seo-monitoring)
- [Lemwatch pricing](https://lemwatch.com/pricing)
- [SSO / SAML Authentication](https://lemwatch.com/help/sso-saml)
- [How does Lemwatch track SSL certificate expiry?](https://lemwatch.com/help/ssl-expiry-tracking)