Skip to main content

Viewing Certificate Findings

The Findings page lists every finding on your active monitors in one place: the certificate problems and weaknesses from each monitor's latest check. Open it from Certificate & TLS Monitoring ➡️ Findings. It replaces the earlier Errors page.

The page has two views, By Finding and By Monitor.

By Finding​

Each finding is listed once, with the number of Monitors it's on, since the same problem often repeats on every host behind one server or load balancer. Findings are listed worst first: Critical, Error, Warning, then Notice. Use the filter bar above the list to show findings by Severity, Profile or Tag.

Click a finding to open its details: what it means, how to fix it (with a link to its page in Certificate Findings), and the monitors it's on, each linking to the report that shows it.

Beside each monitor is a value that describes the finding there, shown as an interval with the date on hover:

ValueShown for
SinceHow long a warning or error has been on the monitor, such as "3 days". A finding the monitor has had since its first check counts from that check.
ExpiresCertificate expires soon: how long until the certificate expires, such as "in 15 days".
Certificate ChangesCertificate keeps changing between checks: how many times the certificate changed in the last week, and how long ago it last did.

The monitors are sorted on that value, then by name. Past one page, the list has pages and a filter bar (Profile, Tag, or type to search). Use the arrows at the top right to step through the findings, and Findings at the top left to go back to the list.

Dismissing From the Findings Page​

On the details of a finding that can be dismissed (a notice, or No CAA record), select one or more monitors and click Dismiss. Select All covers every monitor the filter shows, on every page. A dismissed finding stops counting on those monitors, here and on their reports; restore it from the monitor's report. See dismissing a finding.

By Monitor​

The monitors with a warning or an error, with their findings, when their certificate expires, and their host. Click a monitor's name to open its report. Filter the list by Severity, Finding, Profile or Tag, or type to search.

When a monitor's last check couldn't connect, its certificate findings are the ones from before the failure, and the list says so.

Exporting Findings​

Click Export Findings to download a CSV with a row for each finding on each monitor: its severity, title and key, the monitor, its host and profile, a Detail column with the same value as the finding's details (as UTC dates), and links to the monitor's report and to how to fix the finding.

Taking Action​

Work from the top of By Finding: fixing one finding often clears it on many monitors at once. Configure contact groups and alerting to be told about new findings rather than relying on this page alone.