How to get notified regarding Origin Certificate expiration
How do I get notified when an origin certificate is about to expire? For example: I used to have a monitor notify me when the ssl was 30 days from expiration but that no longer works for domains that go through the Cloudflare proxy.
I have referenced this https://developers.cloudflare.com/notifications/notification-available/#ssltls but it only seems to apply to ssl certificates that are purchased or uploaded through Cloudflare.
Cloudflare Docs
Available Notifications | Cloudflare Notifications docs
Available Notifications depend on your Cloudflare plan. Cloudflare offers a variety of Notifications for our products and services, such as Billing, Denial of Service protection, Magic Transit, and SSL/TLS.
1 Reply
Nothing CF offers natively. You could configure a monitor bypassing proxy/a way around proxy (like direct ip connect w/ host header/sni and then whitelist the monitor's IP). CF does offer Origin Server Certs (under SSL/TLS -> Origin Server) which are trusted by the CF Proxy and work w/ Full (Strict), and last up to 15 years