SSL Certificate expiration date monitoring options

[Alok-kumar]

Hi guys,

We have external CA certificate for global protect VPN which we want to monitor for its expiration date so that we can get it renewed we in advance to avoid any outage. can anyone pls suggest how can we achieve it. 

thanks in advance!!

[RyanJohnstone]

not sure what monitoring platforms you have available but Solarwinds achieves this via is Server and Application Monitroing module, we use this for monitoring expiry dates for our SSL certs on a variery of devices

[Mick_Ball]

we simply use a spreadsheet with expiration dates, this has loads of stuff and is part of our weekly routines.....

ssl-monitor

there are some free ones such as https://certificatemonitor.org/  but you only find out they no longer work when it's too late....

statuscake does this well but about a tenner per month for 50 sites.

Or....    stick an entry in a shared calendar and have notification set to 2 weeks....

if you can find the cli for certificate properties then API and |grep "expiry date"  not sure what to do with it after that but some kind of diff or summink.

[VishnuK]

Can you share any article how to achieve this

[RyanJohnstone1144]

yep sure, check out link below

Article Detail (solarwinds.com)

[VishnuK]

Thank you so much.

[OtakarKlier]

Hello,

We use several methods. First we have the vendor who we purchased the cert from alert us (not sure who all does but I know DiGiCert does. We also then setup a task in a windows server that runs a powershell script to email us. Last we use our email calendars and put in a meeting request.

Regards,