Search: Advanced search

(NEW) SSL Certificate Date Check

Article ID: 484

Last updated: 12 Jul, 2023

Revision: 4

Export to PDF

Email to friend

This check is new as of version 4.2.0

This check takes a server name, port numbers, ex. 443, 6443 and 7443 and a warning days parameter. It will attempt to read the RAW certificate from that port number and decode the certificate. It will then check the expiration date

on the certificate, compare how many days are left to the number of warning days, then set the warning flag if needed.

Server Name:

Domain name of Server (or IP address)

SSL Port #(s):

Enter Port # that certificate is associated with.

You can check multiple ports on a single server by separating the numbers with a colon:

ex. 443:6443:7443 - these are typically the ports used in Esri's enterprise system. Other ports can be checked though.

Warning Days:

Input the number of days in advance that you would like to be notified of the certificate expiration

SUPPLEMENTAL OPTION

File Certificate Date Check

For this option, SSL Port # parameter is entered "file:FileName.cer"

This option was added for when a direct connection cannot be made to the certificate, but you still want to be notified when a certificate is expiring.

These certificate files MUST be in the 'scripts' folder and MUST be in the 'PEM' format.

https://www.ssl.com/guide/pem-der-crt-and-cer-x-509-encodings-and-conversions

Example:

-----BEGIN CERTIFICATE-----

certificate information

etc....

-----END CERTIFICATE-----

The certificates associated with ADFS/SAML in AGOL, etc. can also be checked with this method.

Prev		Next
Windows WMI Server Stats		Developing Custom Checks