{"id":6195,"date":"2026-08-20T09:18:15","date_gmt":"2026-08-20T06:18:15","guid":{"rendered":"https:\/\/www.scalahosting.com\/kb\/?p=6195"},"modified":"2026-08-20T09:18:16","modified_gmt":"2026-08-20T06:18:16","slug":"check-ssl-certificate-expiration-spanel","status":"publish","type":"post","link":"https:\/\/www.scalahosting.com\/kb\/check-ssl-certificate-expiration-spanel\/","title":{"rendered":"How to Monitor SSL Certificate Expiration in SPanel"},"content":{"rendered":"\n

SPanel already watches the SSL certificates it manages and sends an expiry warning through the Notifications Manager<\/strong>, so there is no on\/off button to find. Your job is to know where certificate status lives – the ‘Expires At<\/em>‘ date on the SSL Certificates page and the SSL Status column on the Website Monitoring page – and to confirm the alert can reach you. <\/p>\n\n\n\n

One caveat up front<\/strong>: \u0422his warning fires close to expiry [VERIFY] exact SSL-expiry warning window (~72h), so treat it as a safety net, not a 30-day planner.<\/p>\n\n\n\n

Who this is for<\/strong><\/h2>\n\n\n\n

This is for the owner of a small or medium site who never wants a visitor to hit a red “your connection is not private” warning. If you run one site or a handful of domains on a managed VPS and would rather not track renewal dates in a spreadsheet, this shows you where SPanel surfaces that information and how to make sure its alert reaches you.<\/p>\n\n\n\n

What problem this solves<\/strong><\/h2>\n\n\n\n

An expired certificate is invisible until it is catastrophic. Nothing looks wrong, then on the expiry date every browser starts blocking the site and customers assume you have been hacked. The usual fix is tracking renewal dates by hand – exactly the chore people forget. SPanel removes the need to remember by checking the certificates it manages and alerting you.<\/p>\n\n\n\n

How SPanel solves this<\/strong><\/h2>\n\n\n\n

The expiry check runs automatically in the back-end. There is no toggle to switch on and nothing to configure. What you do is confirm where status is shown and make sure the alert reaches you.<\/p>\n\n\n\n

Open Tools > SSL Certificates<\/strong>. This page lists each domain’s certificate, its Issuer<\/em>, and an Expires At<\/em> date, so you can read the renewal deadline for every managed certificate at a glance.<\/p>\n\n\n\n

\"How<\/figure>\n\n\n\n

For a second view, the Website Monitoring<\/strong> page includes an SSL Status column, so certificate health sits next to whether the site is responding.<\/p>\n\n\n\n

\"How<\/figure>\n\n\n\n

When a certificate nears expiry, SPanel raises the warning through the Notifications Manager<\/strong>, the same place your other server alerts arrive. The one thing SPanel cannot do is guarantee you read it, so make sure that channel points at an address you check.<\/p>\n\n\n\n

Why this is different in SPanel<\/strong><\/h2>\n\n\n\n

Two things stand out. <\/p>\n\n\n\n

First, SSL-expiry alerting is built in and delivered through the Notifications Manager alongside your other server alerts – no third-party monitor, no cron job curling your own endpoint. <\/p>\n\n\n\n

Second, expiry dates are visible per domain on the SSL Certificates page, so a glance at the ‘Expires At’ column tells you where every managed certificate stands without opening a terminal.<\/p>\n\n\n\n

Before you start<\/strong><\/h2>\n\n\n\n
    \n
  • Access your SPanel user account<\/strong> (the standard user UI, not root or WHM).<\/li>\n\n\n\n
  • Your domain list<\/strong> in mind, so you can scan the ‘Expires At’ column for each.<\/li>\n\n\n\n
  • The Notifications Manager<\/strong> pointed at a mailbox you actually monitor.<\/li>\n\n\n\n
  • Nothing here is destructive – you are just reading statuses, not reissuing certificates.<\/li>\n<\/ul>\n\n\n\n

    Step-by-step<\/strong><\/h2>\n\n\n\n
      \n
    1. Log in to SPanel with your user account and open Tools > SSL Certificates<\/strong>. You should see a row for each domain with its Issuer and an ‘Expires At’ date.<\/li>\n<\/ol>\n\n\n\n
      \"How<\/figure>\n\n\n\n
        \n
      1. Read the ‘Expires At’ column. Any date inside the next couple of weeks is worth a note; if a certificate auto-renews, the date usually rolls forward before then.<\/li>\n\n\n\n
      2. Open the Website Monitoring page and find the SSL Status column, which shows certificate health beside the site’s response status.<\/li>\n<\/ol>\n\n\n\n
        \"How<\/figure>\n\n\n\n
          \n
        1. Open the Notifications Manager and confirm the address on file is one you read daily – [VERIFY UI LABEL] user-facing Notifications Manager channel for SSL alerts. A stale address<\/strong> is the most common reason an alert is “missed.”<\/li>\n\n\n\n
        2. There is nothing to save and no switch to flip. Once the address is correct, the automatic check handles the rest for you.<\/li>\n<\/ol>\n\n\n\n

          What happens behind the scenes<\/strong><\/h2>\n\n\n\n

          SPanel periodically inspects the certificates it manages and compares each expiry date against the current time. When one is close enough, the system queues a notification and hands it to the Notifications Manager. Because the check is server-side and continuous, you do not schedule it or keep it running – the benefit is one fewer recurring task and a warning that arrives on its own.<\/p>\n\n\n\n

          Limitations and edge cases<\/strong><\/h2>\n\n\n\n
            \n
          • The warning is a late safety net.<\/strong> It fires within roughly 72 hours of expiry [VERIFY] exact SSL-expiry warning window (~72h) – not a 30-day planner. For long lead time on a manually managed certificate, set your own reminder from the ‘Expires At’ date.<\/li>\n\n\n\n
          • Auto-renewing Let’s Encrypt certificates usually renew first.<\/strong> These renew before this warning would fire, so most sites rarely see the alert. Treat its silence as healthy, not as proof the check is off.<\/li>\n\n\n\n
          • It covers certificates SPanel manages for your domains.<\/strong> A certificate managed outside SPanel is not part of this check, so track those yourself.<\/li>\n<\/ul>\n\n\n\n

            Troubleshooting<\/strong><\/h2>\n\n\n\n
            Symptom<\/td>Likely cause<\/td>What to do<\/td><\/tr>
            No expiry alert ever arrives<\/td>Notifications Manager address is wrong or unmonitored<\/td>Confirm the address and check spam; the alert only fires near expiry<\/td><\/tr>
            ‘Expires At’ date looks stale<\/td>Auto-renewal has not run yet, or certificate is externally managed<\/td>Re-check after the renewal window; track external certificates separately<\/td><\/tr>
            SSL Status column shows a problem<\/td>Certificate expired or was not issued for that domain<\/td>Open Tools > SSL Certificates and review that domain’s row<\/td><\/tr>
            Certificate not listed at all<\/td>It is not managed by SPanel for that domain<\/td>Manage it in SPanel or monitor it with your own reminder<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

            When to use this \/ when not to use this<\/strong><\/h2>\n\n\n\n
            Use this when<\/td>Skip or use something else when<\/td><\/tr>
            You want a built-in last-line warning before a certificate lapses<\/td>You need 30-day-ahead renewal planning<\/td><\/tr>
            Your certificates are managed by SPanel<\/td>The certificate is managed outside SPanel<\/td><\/tr>
            You want certificate status beside uptime in one place<\/td>You require a custom alert window or escalation policy<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

            FAQ<\/strong><\/h2>\n\n\n\n

            Q:<\/strong> Is there a button to turn SSL expiry monitoring on?<\/strong><\/p>\n\n\n\n

            A:<\/strong> No. The check runs automatically for the certificates under SPanel management. You confirm where status is shown and that the Notifications Manager can reach you, rather than enabling anything.<\/p>\n\n\n\n

            Q:<\/strong> How much warning will I get before a certificate expires?<\/strong><\/p>\n\n\n\n

            A:<\/strong> The warning fires close to expiry, within roughly 72 hours [VERIFY] exact SSL-expiry warning window (~72h). Use the ‘Expires At’ date if you want more lead time.<\/p>\n\n\n\n

            Q:<\/strong> Where do I see when a certificate expires?<\/strong><\/p>\n\n\n\n

            A:<\/strong> On the SSL Certificates page under Tools > SSL Certificates<\/strong>, in the ‘Expires At’ column. Each managed domain shows its Issuer and expiry date there.<\/p>\n\n\n\n

            Q:<\/strong> Will I get an alert if my Let’s Encrypt certificate auto-renews?<\/strong><\/p>\n\n\n\n

            A:<\/strong> Usually not, because it renews before this warning would fire. Silence in that case means the renewal worked.<\/p>\n\n\n\n

            Q:<\/strong> Does this cover certificates I installed outside SPanel?<\/strong><\/p>\n\n\n\n

            A:<\/strong> No. The check covers certificates SPanel manages for your domains. Anything managed elsewhere needs your own tracking.<\/p>\n\n\n\n

            Q:<\/strong> How does the alert reach me?<\/strong><\/p>\n\n\n\n

            A:<\/strong> Through the Notifications Manager, the same channel your other server alerts use. Make sure the address on file is one you read regularly.<\/p>\n\n\n\n