Does this cost anything to run?

No — SSL Labs' analyze API is free for reasonable use; very large domain lists should stagger checks to respect its rate limits.

Can I monitor internal/private domains?

No — SSL Labs can only check publicly reachable domains; use an internal monitoring tool for private infrastructure.

IT OpsStructurally Validated

SSL Certificate Expiry Monitor

A daily check runs every domain on your watchlist through SSL Labs' free public API and alerts your team on Slack when a certificate is within 14 days of expiring — no more discovering an expired cert from an angry customer.

Automation flow

Step 1

Daily Trigger

Runs every morning at 8am.

Step 2

Read Domain List

Pulls your monitored domains.

Step 3

Check SSL Cert

Queries SSL Labs' free public API.

Step 4

Filter Expiring Certs

Flags certs within 14 days of expiry.

Step 5

Expiry Alert

Posts a Slack alert.

How it works

1Every morning, your list of domains is read.
2Each domain is checked against SSL Labs' analyze API for its current certificate expiry.
3Anything expiring within 14 days triggers a Slack alert with the exact date.

Services used

SSL Labs API (free)Google SheetsSlack

What you'll need

An n8n Cloud or self-hosted account
A Google account (Sheets)
A Slack workspace
No paid API needed — uses Qualys SSL Labs' free public API

What's included

Uses a free public API — no paid monitoring service needed
No-code setup in 10 minutes
Covers any domain, any registrar
Easy to add a second, more urgent alert tier

Estimate what this could save you

Times per week

Minutes each time

Your hourly value ($)

3.6 hours/month

≈ $108/month in your time

A rough estimate based on what you enter above — not a guarantee. Actual time saved depends on your process.

Make it yours

Add a second alert tier for certs expiring within 3 days, using a louder message format.
Also email a designated on-call engineer for domains flagged as critical infrastructure.
Add an auto-renewal check — if you use Let's Encrypt with auto-renew, cross-reference alerts against your renewal logs to catch silent renewal failures specifically.

Works well with this automation

Domain Expiry Monitor

Weekly RDAP lookup of your domains — alerts before one lapses and gets snapped up by someone else.

$15

Incident Status Page Updater

One webhook call updates your status sheet, alerts your team, and emails every subscriber.

$19

IT Ticket Triage Router

New support tickets are auto-categorized, urgency-flagged, logged, and routed to Slack.

$19

Save with the complete system: IT & Monitoring Bundle

Instead of buying separately: $117 — System: $49

View system

Questions about this template

$15one-time

Secure checkout via Polar. Delivered by email instantly.

Structurally validated: automatically checked for valid n8n format before every deploy.

Difficulty: Easy
Setup time: ~10 min
Integrations: 3
Node count: 5
Format: .json + guide