Question 1

What does AdministerPoint SSL certificate monitoring check?

Accepted Answer

For each monitored endpoint it performs a live TLS handshake and records the certificate issuer, the valid-from date, the expiry date, the number of days remaining, and an expiry status. It answers one question clearly: when does each certificate expire, and is it currently valid, expiring, expired, or unreachable? It is built for expiry and status visibility, not TLS security scanning.

Question 2

How often are certificates checked?

Accepted Answer

Monitored certificates are re-checked automatically every 6 hours by a server-side job. You can also run an immediate on-demand re-check at any time from the SSL & Domain page in your dashboard, which performs a fresh TLS probe and stores the updated issuer, validity dates, days remaining and status.

Question 3

When is a certificate marked as expiring?

Accepted Answer

A certificate is flagged as expiring when it has 30 days or fewer remaining before its expiry date. Once the expiry date has passed it is marked expired, and if the endpoint cannot be reached or the certificate cannot be retrieved it is shown as an error. The 30-day boundary is a fixed expiry-status classifier and cannot be adjusted per certificate.

Question 4

How many certificates can I monitor?

Accepted Answer

Monitored SSL certificate capacity is 2 on the free Starter plan, 20 on Professional, and unlimited on Enterprise. The limit is applied when you add a monitored certificate. See the pricing page for the full plan comparison.

Question 5

Can I monitor a certificate on a custom port?

Accepted Answer

Yes. Alongside standard HTTPS on port 443, you can monitor a certificate served on a supported custom TLS port by entering the host and port together, for example example.com:8443. The endpoint must be publicly reachable.

Question 6

Does AdministerPoint validate certificate trust or the full chain?

Accepted Answer

No. This monitor is designed for certificate expiry and status visibility, not TLS security. During the handshake it reads the issuer and the validity dates; it does not evaluate certificate-authority trust, hostname match, revocation status, or the completeness of the certificate chain, and it is not a vulnerability scanner.

SSL Certificate Monitoring & Expiry Tracking