topic Re: SSL Certificate expiration date monitoring options in General Topics

SSL Certificate expiration date monitoring options

Alok-kumar — Fri, 22 Nov 2019 09:14:04 GMT

Hi guys,

We have external CA certificate for global protect VPN which we want to monitor for its expiration date so that we can get it renewed we in advance to avoid any outage. can anyone pls suggest how can we achieve it.

thanks in advance!!

Re: SSL Certificate expiration date monitoring options

RyanJohnstone — Fri, 22 Nov 2019 14:20:52 GMT

not sure what monitoring platforms you have available but Solarwinds achieves this via is Server and Application Monitroing module, we use this for monitoring expiry dates for our SSL certs on a variery of devices

Re: SSL Certificate expiration date monitoring options

Mick_Ball — Fri, 22 Nov 2019 17:44:02 GMT

we simply use a spreadsheet with expiration dates, this has loads of stuff and is part of our weekly routines.....

ssl-monitor

there are some free ones such as https://certificatemonitor.org/ but you only find out they no longer work when it's too late....

statuscake does this well but about a tenner per month for 50 sites.

Or.... stick an entry in a shared calendar and have notification set to 2 weeks....

if you can find the cli for certificate properties then API and |grep "expiry date" not sure what to do with it after that but some kind of diff or summink.

Re: SSL Certificate expiration date monitoring options

VishnuK — Thu, 22 Jun 2023 08:15:19 GMT

Can you share any article how to achieve this

Re: SSL Certificate expiration date monitoring options

RyanJohnstone1144 — Thu, 22 Jun 2023 08:46:48 GMT

yep sure, check out link below

Article Detail (solarwinds.com)

Re: SSL Certificate expiration date monitoring options

VishnuK — Mon, 10 Jul 2023 17:36:48 GMT

Thank you so much.

Re: SSL Certificate expiration date monitoring options

OtakarKlier — Wed, 12 Jul 2023 21:13:36 GMT

Hello,

We use several methods. First we have the vendor who we purchased the cert from alert us (not sure who all does but I know DiGiCert does. We also then setup a task in a windows server that runs a powershell script to email us. Last we use our email calendars and put in a meeting request.

Regards,