The main website can look healthy
example.com may be fine on port 443 while example.com:8443 is serving an expired or mismatched certificate.
Check public HTTPS services on ports like 8443, then monitor the certificate if that port is part of a customer-facing workflow.
A small team may have an admin panel, customer portal, appliance UI, webhook endpoint, or staging service exposed on a custom public port. If the certificate expires there, the warning can still block real work.
example.com may be fine on port 443 while example.com:8443 is serving an expired or mismatched certificate.
They are often set up once and then forgotten until a customer, partner, or internal user reports a warning.
The public checker only checks websites and services reachable from the public internet.
If a service is public and uses a custom TLS port, include the port in the target. The result should make clear whether the certificate is valid for that hostname and when it expires.
Enter example.com:8443 when users connect directly to that port.
https://example.com:8443 works too and helps avoid checking the wrong service.
A certificate can be valid for one hostname and still fail on another hostname pointing to the same server.
Cert Monitor keeps the default UI simple: most people only need a domain or URL. Custom ports stay available for public services that need the same outside-in monitoring as the main website.
The default check assumes port 443, so non-technical owners are not forced to think about ports.
A custom port can be checked and later monitored when it is part of a real customer or partner path.
A custom port should be tracked as its own target, because it can fail while the main site stays valid.
Custom ports often pair with expiry and hostname coverage issues.
Use an SSL certificate monitoring tool to monitor public SSL certificates, spot expiry risk, hostname mismatch, and renewal failures before visitors see browser warnings.
Check SSL expiry dates for public websites and start monitoring certificate expiration with email reminders before visitors see browser warnings.
Check whether an SSL certificate covers the exact public hostname, including www and subdomains, and monitor selected sites for future risk.