Skip to content

Tests and metrics for X.509 certificates

Onionprobe should check and have metrics for X.509 certificates:

  • Expiry date.
  • Fingerprint.
  • Issuer.

It also needs:

  • CommonName and SubjectAltName matching.
  • A Prometheus alerts for certificates about to expire.

That enables monitoring of certificate health and even alerting when certificates are about to expire.

Edited by Silvio Rhatto