---
title: "Example of setting up TLS(SSL) certificate availability check"
sidebar_label: "Example of setting up TLS(SSL) certificate check"
description: "How to configure checking and notifications to track the certificate expiration date"
sidebar_position: 6
---

import Formbricks from '@theme/MDXComponents/Formbricks'
import CheckIcon from '@selectel/docux/icons/check'
import MoreVerticalIcon from '@selectel/docux/icons/more-vertical'
import AddEmail from '@site/i18n/en/docusaurus-plugin-content-docs/current/_partials/availability-check/add-email.mdx'

# Example of setting up a TLS(SSL) certificate check

:::info

This is an example of setting up an availability check for a TLS(SSL) certificate so that you receive an email notification 10 days before the certificate expires.

:::

1. [Create a check](#create-check).
2. [Add an email address to contacts](#add-contact-email).
3. [Configure email notifications](#configure-email-notifications).

## 1. Create a check \{#create-check}

1. In the [Control panel](https://my.selectel.ru/availability-check/checks), on the top menu, click **Products** and select **Availability Check**.

2. Ensure that you have checks available to create — check the number of created checks and the total number of available checks in the upper-right corner. If all available checks have been created, [order additional ones](/availability-check/manage-checks.mdx#order-additional-checks). Three checks are provided free of charge.

3. Click **Create check**.

4. Enter a name for the check, for example, Certificate Check.

5. Optional: enter tags for filtering in the check list.

6. Select the check type — SSL.

7. In the **Host/IP** field, enter the domain for which the certificate was issued.

8. Select the protocol for the check — IPv4 or IPv6.

9. Select the check interval — how often the check request will be performed, for example, every five minutes.

10. Select the check timeout — the time to wait for a response from the server for the check request, after which the check will be considered failed, for example, five seconds.

11. Select the check execution sequence. The execution sequence determines from which check locations the requests will be sent:

    * sequentially — each subsequent request will be executed from the next check location in the list of selected locations;
    * in parallel — each request will be executed from all selected locations simultaneously;
    * randomly — each subsequent request will be executed from a random location from the list of selected locations.

12. Specify the connection port; port 443 is specified by default.

13. Specify the period before certificate expiration — the number of days until the certificate expires when you want to receive a notification. For example, if you specify 10 days, the notification will be sent 10 days before the certificate expires.

14. Select the check locations from which the requests will be sent. The IP addresses of these locations are shown—if you have a firewall installed on your server, allow these IP addresses in the firewall rules.

15. If you do not want the certificate check results to be displayed on the [public statistics page](/availability-check/public-statistics-page.mdx) for your account's availability checks, uncheck **Show in public report**.

16. If you do not want the certificate check results to be included in the summary [weekly report](/availability-check/configure-notifications.mdx#configure-weekly-report), uncheck **Include in weekly email report**.

17. Optional: test the check — click **Test check**.

18. Click **Create and run**.

## 2. Add an email address for notifications \{#add-contact-email}

<AddEmail />

## 3. Configure email notifications \{#configure-email-notifications}

1. In the [Control panel](https://my.selectel.ru/availability-check/checks), on the top menu, click **Products** and select **Availability Check**.

2. Open the **Checks** tab.

3. Open the check page you [created in step 1](#create-check), → **Notifications** tab.

4. Select the email address you [added in step 2](#add-contact-email).

5. Click **New notification**.

6. Select the event — **Certificate expired**.

7. Choose when to notify about an event (send an email) — immediately when the check detects the remaining certificate validity period (10 days), or after the required number of retries. If your certificate is renewed automatically and the renewal is delayed, we recommend choosing to send notifications after retries. If the certificate is renewed before the retry, the notification will not be sent.

8. Select the notification frequency, for example, no more than one notification per minute.

9. If you do not want to receive an email that the certificate validity has been restored, clear the **Notify about restoration** checkbox. Restoration notifications are not sent at the exact moment of restoration, but at the notification frequency you specified in step 8. For example, if the certificate is restored in half an hour but the notification frequency is set to once per hour, the restoration notification will arrive one hour after the failure notification.

10. Click <CheckIcon />.

<Formbricks />