About ssl expiry checker
An expired certificate shows visitors a scary browser warning. The checker shows the expiry date and the issuer, so you can renew in time.
Good habits
- Renew at least a few weeks before expiry.
- Set up automatic renewal, for example with Certbot.
- Add monitoring so you are alerted before a certificate expires.
A worked example
A check shows the certificate expires on 12 December with 34 days remaining. Free certificates last 90 days and are usually renewed automatically after about 60. If fewer than 30 days remain and the renewal has not happened, investigate the renewal job now.
Monitoring
- Set an alert at 30, 14 and 7 days before expiry.
- Check every domain and subdomain, including those used for email and APIs.
- Keep a record of who owns each certificate.
