SSL Monitoring Statuses

Our SSL Installation Monitoring Service regularly monitors for several conditions. When installation errors are observed, and an email alert generated , one or more conditions will appear within the alert, and each may share a common remedy, or require separate remedies.

Refer to the error list below for further detail and suggested remedies.

Installation ERRORS

No Certificate was found at host

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, no certificate was found to be installed on the host.

STATUS:Website traffic not secured by SSL. Website visitors will receive security warnings and/or errors.

REMEDY: This certificate is not installed on the web server. To correct, install this certificate on the webserver. In a multi-server installation, ensure that this certificate is installed on all servers.

See also: Installation

Certificate has expired

DETAIL: When accessing the certificate installed on the host of the same name, the installed certificate was found to be expired.

STATUS: Website traffic not secured by SSL. Website visitors will receive security warnings and/or errors.

REMEDY: This certificate is not installed on the web server. To correct, install this certificate on the webserver. In a multi-server installation, ensure that this certificate is installed on all servers.

See also: Installation

Host does not match

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the hostnames within each did not match.

STATUS: Website traffic not secured by SSL. Website visitors will receive security warnings and/or errors.

REMEDY: Either the wrong certificate is installed on the webserver, or the correct certificate is installed by lacks the correct hostname coverage (i.e. SANs). To correct either install the correct certificate on the webserver, or reissue this certificate so that is contains all the needed SAN hostnames.

See also: Installation

See also: Reissuance

Server was unresponsive

DETAIL: When attempting to access the SSL certificate installation, the host did not respond.

STATUS: Website is not currently accessible.

REMEDY: Investigate that the webserver is operational and can be publicly accessed at the specified hostname via the specified port.

Installation WARNINGS

Serial Number does not match

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the serials numbers within each did not match.

STATUS: Website traffic is secured via SSL, however a certificate other than this one is installed on the server.

REMEDY: The incorrect instance (e.g. a previous, or currently invalid instance) of the certificate is installed on the webserver. To correct, install this correct certificate on the webserver.

See also: Installation

Certificate is expiring with the next 30 days

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the installed certificate was found to be expiring within the next 30 calendar days

STATUS: Website traffic is currently secured via SSL, however this will stop working within the next 30 days

REMEDY: This certificate requires renewal, configuration and installation within the next 60 days

See also: Symantec

Installation Valid

Host matches

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the hostnames within each were found to match.

STATUS: OK

Serial Number matches

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the serial numbers within each were found to match.

STATUS: OK

Not Expiring Soon

DETAIL: When comparing this certificate to the certificate installed on the host of the same name, the installed certificate was found to NOT be expiring within the next 60 calendar days.

Status: OK