Start your 7-day free trial, card not charged until it ends

SSL certificate monitoring

SSL certificate monitoring that catches expiry weeks before it bites

SSL certificate monitoring checks the certificate on each site and warns you before it expires. TLDTrack reads the certificate on every domain you monitor about twice a day, shows the issuer and days remaining, and starts alerting 30 days before expiry, in one digest instead of an inbox full of single warnings.

Start your free trial See how the check works

SSL monitoring included on every plan · card not charged until your trial ends

30 days

before expiry the first alert fires

14 days

before expiry severity rises to high

7 days

before expiry severity rises to critical

1 hour

between runs of the certificate checker

01 · How it works

A probe built to avoid false positives

A naive certificate check reports healthy sites as broken. TLDTrack's probe was rebuilt around the ways real hosting actually behaves.

Runs every hour

The checker runs every hour and re-checks each certificate once its last result is 12 hours old, working through the whole portfolio in batches.

Checks bare and www

Plenty of sites only answer on www. The probe tries the bare domain first, then www, so CDN-fronted and www-only sites read correctly instead of showing as "no SSL".

Multiple IPs, SNI set

Up to two resolved public IPs are tried per host, with the server name sent on every handshake so shared hosts and CDN edges present the right certificate.

Retries failed lookups

A failed DNS resolution is retried before the check is marked failed, so a transient resolver timeout never produces a false alarm.

02 · What you see

Expiry handled before it becomes an incident

Certificate state across the whole portfolio, and alerts that get louder as the date approaches.

Issuer and days remaining, every domain

Each domain shows who issued its certificate, when it expires and how many days remain, across every site you monitor, in one view.

Alerts that sharpen as expiry nears

The first alert fires 30 days out. Severity rises to high at 14 days and critical at 7, and an expired certificate is flagged critical. Once the renewed certificate is picked up, the alert resolves itself.

One digest, not one email per certificate

A single consolidated email per organisation lists every certificate that needs attention, most urgent first. Fifty expiring certificates means one email, not fifty.

Per-contact opt-ins

SSL expiry emails go only to the contacts who ticked SSL expiry in the notifications matrix, so the right person gets the renewal nudge and nobody else is copied in.

SSL monitoring has a per-domain toggle. Certificate data is still collected for every domain so the dashboard stays complete; switching a domain off just stops its expiry alerts.

03 · Pricing

Simple, transparent pricing

Every paid plan starts with a 7-day free trial. Cancel during the trial and you won't be charged.

Free forever

Free

Monitor one site, free forever

$0/mo

1 website + 4 extra monitors

No credit card needed

  • Uptime checks every 5 minutes
  • Response time tracking
  • Domain expiry alerts
  • SSL certificate expiry alerts
  • Email alerts
Start free

7 days free

Starter

For individuals & small portfolios

$11/mo

Up to 5 websites

250 monitoring credits / month

  • Uptime, SSL, DNS & blacklist
  • Content & visual change monitoring
  • Accessibility (WCAG 2.2) monitoring
  • Email health & renewal alerts
  • PageSpeed & malware scanning
  • Free WordPress plugin
  • WHM & cPanel monitoring
  • Bulk import & export
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

Most popular

Pro

For active managers & agencies

$29/mo

Up to 25 websites

1,250 monitoring credits / month

  • Everything in Starter
  • Up to 5 team members
  • Client report builder
  • AI search visibility
  • Priority support
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

7 days free

Agency

For large portfolios & teams

$89/mo

Up to 100 websites

5,000 monitoring credits / month

  • Everything in Pro
  • Up to 20 team members
  • Agency CRM & white-label reports
  • Security, SEO & compliance scans
  • Dedicated support
  • AI integration (Claude & ChatGPT)
Start free trial

Bigger than 100 websites? Our Enterprise plan adds unlimited sites, custom data residency, an SLA, dedicated onboarding and custom integrations. Talk to us

*SMS alerts are an optional add-on on paid plans for UK mobile numbers, paid for with prepaid SMS credit packs. Prices exclude any applicable sales tax. Your card won't be charged during a paid-plan trial. Cancel anytime.

04 · Questions

Frequently asked questions

How do I monitor SSL expiry on my website?

Add the domain to TLDTrack. Its certificate is read when you add it and about twice a day after that, and you get an alert 30 days before it expires, rising to high at 14 days and critical at 7.

How often are certificates checked?

The checker runs every hour and re-checks each certificate once its last result is 12 hours old, so every certificate across the portfolio is checked around twice a day.

My site only works on www. Will the check still read it?

Yes. The probe tries the bare domain first and then www, tries up to two resolved IPs per host, and sends the server name on every handshake so CDN edges and shared hosts present the right certificate.

When do expiry alerts fire?

The first alert fires 30 days before expiry. Severity rises to high at 14 days, critical at 7 days, and an expired certificate is flagged critical. When the renewed certificate is picked up, the alert resolves itself automatically.

Will I get one email per expiring certificate?

No. TLDTrack sends one consolidated digest per organisation listing every certificate that needs attention, ordered most urgent first.

Who receives SSL expiry emails?

Only the contacts who opted into SSL expiry in the notifications matrix. Each contact on a domain has their own row of per-category opt-ins, so the developer can get SSL alerts while the account manager gets renewals.

Can I turn SSL monitoring off for one domain?

Yes, each domain has its own SSL monitoring toggle. Certificate data is still collected so the dashboard stays complete; turning a domain off just stops its expiry alerts.
Mark Grice, founder of TLDTrack

Mark Grice, founder of TLDTrack. Runs FullyCoded, a Cornwall web agency, and built this to keep 500+ client sites in front of him every day.

What happens next

Never explain an expired certificate to a client

Do it yourself

Start your free trial

Add your domains and TLDTrack starts tracking every certificate's issuer and days remaining, with alerts from 30 days out. Your card is not charged for 7 days.

Start your free trial

Talk it through

Arrange a call with Mark

If you would rather talk through how this works across every site you look after, we can go through it together.

Book a call

See uptime monitoring

05 · Explore

Explore more of TLDTrack

All features overviewEvery check TLDTrack runs and what it costs.For agenciesManage every client domain in one dashboard.TLDTrack vs UptimeRobotHonest feature-by-feature comparison.Free email deliverabilityFree SPF / DKIM / DMARC checker, report by email.iOS & Android appsPush alerts when something breaks.