On this page
Coverage
HostRepute monitors HTTPS, raw TLS, and STARTTLS endpoints for SMTP, IMAP, POP3, LDAP, and FTP.
Certificate checks include expiry, hostname match, chain validity, signature algorithm, SAN data, CAA validation, fingerprint changes, and load balancer drift.
Private agents
Private certificate agents can poll assigned certificate profiles and report checks from inside your network without exposing internal endpoints publicly.
Reviewing certificate checks
Each certificate check records the endpoint, protocol, status, expiry data, SAN values, issuer details, and health findings.
Use certificate history to confirm renewals, investigate endpoint drift, and compare what agents observe from public or private network paths.