SSL Certificate

The SSL Certificate monitor checks a specific location for the existence of a valid SSL certificate. The monitor reports as down if the URL cannot be resolved, if the location cannot be accessed, or in cases where the monitor is configured to use the URL or the IP address of the configured interface, an SSL certificate is not found at all.

Provide a unique name and description for the monitor, then configure the following:

Check certificate by URL. Select this option to enter a URL where the monitor should look for a certificate. The URL must begin with a proper URI, such as http:// or https://. Additionally, this field supports appending the URL with a custom port number. Port 443 is used by default, however, you can specify an alternate port number as well. For example, to use Port 8081, use the following format: https://www.<domain>.com:8081.
Check certificate by file. Select this option to specify a shared network location of the certificate in UNC format. The monitor searches for and uses credentials tied to the target device. The device must have valid Windows credentials and you must have proper permissions to access the network share as configured.
Note: Both methods support the percent variables %device.hostname and %device.address.
Down if certificate expires in the next X days. Enable this option to have the monitor report as Down if the SSL certificate expiration date falls within a specified time frame. Enter the number of days for the monitor to consider.
Check certificate usage (verifies the Common Name matches the URL domain). Enable this option to have the monitor check that the common name on the SSL certificate matches the domain on the URL.
Enable and configure the following additional proxy settings, if desired:
- Proxy server. Enter the address of the required proxy server if needed to access the configured URL. This option is not valid for Path to File.
- Proxy port. Enter the port on which the proxy server listens.
- Proxy username. If required, enter the username for the proxy server.
- Proxy password. Enter the password that coincides with the username for the proxy server.
- Timeout. Enter the length of time WhatsUp Gold attempts to connect to the selected device. When the specified time is exceeded without connecting, a timeout occurs and WhatsUp Gold stops trying to connect to the server. This is considered a failed connection. This option is not valid for Path to File.
Use in rescan. Enable this option to have the monitor appear in Device Properties. If enabled, clicking Rescan Connectivity within the Device Properties interface adds the monitor to the selected device if the applicable protocol or service is active on that device.