Certificate expiry¶
Certificate expiry checks the remaining validity and trust of a direct TLS endpoint, for example HTTPS on port 443.
Field |
Meaning |
|---|---|
Warning if remaining validity ≤ (days) |
Default: 30 days |
Critical if remaining validity ≤ (days) |
Default: 7 days; must be lower than the warning period |
Different certificate name (SNI) → Certificate name (optional) |
Name for certificate validation and SNI, for example when an IP address is used as the target address |
Interval (seconds) |
Hourly, Every 6 hours, Every 12 hours or Every 24 hours (recommended) |
Readings are produced for Certificate valid for and Certificate validation. The expiry date and UTC time are shown with the remaining validity value. For certificates that are about to expire, have expired, are not yet valid or are not trusted, the check shows the corresponding state. Until the failure threshold is reached, failed connection attempts for this check are retried within 60 seconds at the latest; the selected check interval applies again afterwards.
