ping·dan
Start free
SSL certificate monitoring

Renew every TLS certificate before it becomes an outage

Automatically inspect certificates for your HTTPS monitors, see expiry and handshake errors, and alert your team when renewal needs attention.

Start monitoring freeView setup docs
No credit card · 1-minute checks · Every feature included

Automation still needs an independent expiry check

Certificate renewal can fail because of DNS changes, invalid challenge routes, expired credentials, rate limits, or a broken deployment. pingdan checks HTTPS endpoints independently of the renewal system, records the leaf certificate expiry, and warns attached channels once the certificate reaches the alert window.

  • Automatic HTTPS coverageEvery enabled HTTPS endpoint is included in the certificate sweep without a second monitor to configure.
  • Expiry visibilitySee the exact expiry date, last check time, and remaining lifetime from the endpoint view.
  • Handshake diagnosticsSurface TLS connection and certificate inspection errors instead of silently losing expiry data.
  • Multi-channel warningsSend expiry events to the same email, chat, webhook, paging, push, SMS, and incident tools used for uptime.
How it works

Useful signal in three steps

1

Add an HTTPS URL

Create a normal endpoint monitor. Certificate monitoring is enabled automatically for HTTPS.

2

Inspect the certificate

pingdan performs a regular TLS handshake and stores the presented leaf certificate expiry.

3

Renew before impact

When days remaining enter the warning window, attached channels receive the endpoint and expiry details.

Learn more

Practical monitoring guides

Prevent expired certificate outages

Learn why automated renewal fails and how much warning time an operations team needs.

Read guide →

Website uptime monitoring

Pair certificate checks with one-minute availability, latency history, and downtime alerts.

Read guide →

Route actionable alerts

Choose alert channels people will see and include enough context to act immediately.

Read guide →
FAQ

Common questions

Why monitor SSL certificate expiry if renewal is automatic?

Automatic renewal is a process that can fail. Independent monitoring verifies the certificate users actually receive and gives you time to fix DNS, challenge, credential, or deployment problems.

Which certificates does pingdan monitor?

pingdan monitors the leaf TLS certificate presented by each enabled HTTPS endpoint. HTTP-only endpoints do not have a TLS certificate to inspect.

How often are certificates checked?

Certificate sweeps run roughly twice daily, and a check can also be triggered on demand from the endpoint view. That cadence is appropriate because certificate expiry changes infrequently.

When does pingdan send an expiry warning?

Warnings begin when a certificate has 15 days or fewer remaining. The alert includes the endpoint, URL, days left, and exact expiry time.

Know before your users do

Create your first monitor in under a minute. Every feature is free.

Create a free monitor