The SSL Certificate monitor checks a specific location for the existence of a valid SSL certificate.

The monitor reports as down if one of the following is true:

  • URL cannot be resolved.
  • Location on shared network cannot be accessed.
  • SSL certificate is not found.

Monitor-Specific Settings

  • Check certificate by URL. Select to enter a URL where the monitor should look for a certificate. The URL must begin with a proper URI, such as http:// or https://. Additionally, this field supports appending the URL with a custom port number. Port 443 is used by default, however, you can specify an alternate port number as well. For example, to use Port 8081, use the following format: https://www.<domain>.com:8081.
  • Check certificate by file. Select this option to specify a shared network location of the certificate in UNC format. The monitor searches for and uses credentials tied to the target device. The device must have valid Windows credentials and you must have proper permissions to access the network share as configured.
    Note: Both methods support the percent variables %device.hostname and %device.address.
  • Down if certificate expires in the next n days. Enable this option to have the monitor report as Down if the SSL certificate expiration date falls within a specified time frame. Enter the number of days for the monitor to consider.
  • Check certificate usage (verifies the Common Name matches the URL domain). Enable this option to have the monitor check that the common name on the SSL certificate matches the domain on the URL.

HTTP Proxy Settings

Click on the Use Proxy Settings checkbox if the SSL Certificate you are monitoring sits behind a proxy. Apply the following settings to forward SSL Certificate monitor traffic through the HTTP proxy.

  • Proxy server. Enter the address of the required proxy server if needed to access the configured URL. This option is not valid for Path to File.
  • Proxy port. Enter the port on which the proxy server listens.
  • Proxy username. If required, enter the username for the proxy server.
  • Proxy password. Enter the password that coincides with the username for the proxy server.
  • Timeout. Enter the length of time WhatsUp Gold attempts to connect to the selected device. When the specified time is exceeded without connecting, a timeout occurs and WhatsUp Gold stops trying to connect to the server. This is considered a failed connection.

This option is not valid for Path to File.

Refresh Connectivity Profile

  • Use in rescan. Enable this option to have the monitor appear in Device Properties. If enabled, clicking Rescan Device from the device management actions menu within the Device Properties interface adds the monitor to the selected device if the applicable protocol or service is active on that device.