Quickstart: SSL Certificate Monitoring in HeyOnCall

It's easy to configure HeyOnCall to continuously monitor and notify your team about any soon-to-expire SSL certificates, so you have plenty of time to take action before there's a customer-visible outage. Below are steps to get started quickly.

For more information about why it's important to monitor SSL certificates and how to design an SSL certificate monitoring plan, see our more comprehensive guide on SSL Certificate Expiration Monitoring.

Step 1:

Within HeyOnCall, go to a Service page, or click "New Service" and call it "SSL Certificates" to group these monitors together. Assign this Service to whichever on-call Rotation you'd like to get alerts.

Step 2:

Click "New Trigger".

Step 3:

Click "Outbound Probe" as the type of trigger.

Step 4:

Click "It can wait until Monday" to request non-critical alerts.

Step 5:

In the "Name" field, enter a friendly name like: "example.com SSL cert expiry 14+ days".

Step 6:

In the "Timeout" field, enter: "1 hour" so that temporary outages don't cause false alarms.

Step 7:

In the "URL" field, enter a health check endpoint URL, such as: "https://example.com/healthz". Double-check to be sure it's an https URL.

Step 8:

In the "SSL Certificate Minimum Expiration Duration" field, enter: "14 days" so this trigger will be considered down when the certificate will expire in under 14 days.

Step 9:

Click "Create Trigger".

Step 10:

Repeat steps 2-9 for all other combinations you'd like to monitor, such as a critical alert at "2 days", or other subdomains like www.example.com.

That's it!

You can set up triggers with "SSL Certificate Minimum Expiration Duration" on HeyOnCall's free plan in just a few minutes. Sleep easier knowing you'll be alerted well in advance of an easily avoidable customer-facing outage.

For more details, see our guide on SSL Certificate Expiration Monitoring.