SSL days to expiration

Reading Time: < 1 minute

License block: Vezha features

What it shows

SSL days to expiration in Vezha is published as ssl.days_until_expiry. The agent finds certificates through nginx/httpd configs, reads leaf certificates and counts days until expiration.

Why it matters

Certificate incidents often occur due to missed rotations rather than complex failures. Constant monitoring of this indicator reduces the risk of sudden TLS failures in production.

An example from practice

Before the holiday weekend, the team saw that the expiration date of the wildcard certificate was approaching the threshold. The rotation was performed in advance and the emergency service window was avoided.

Scroll to Top