# SSL root certificate or intermediate certificate monitoring

**URL:** <https://community.icinga.com/t/ssl-root-certificate-or-intermediate-certificate-monitoring/8409>\
**Category:** Icinga Web\
**Tags:** notifications, ssl, icinga2\
**Created:** [October 11, 2021, 9:28am UTC](https://community.icinga.com/t/ssl-root-certificate-or-intermediate-certificate-monitoring/8409 "2021-10-11T09:28:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![hasan.raza](https://community.icinga.com/letter_avatar_proxy/v4/letter/h/13edae/32.png) [@hasan.raza](https://community.icinga.com/u/hasan.raza)\
**Post date:** [October 11, 2021, 9:28am UTC](https://community.icinga.com/t/ssl-root-certificate-or-intermediate-certificate-monitoring/8409/1 "2021-10-11T09:28:27Z")

</div>

I have a Icinga monitoring, which can tell me the expiry date of SSL. But, I am looking to setup monitoring for root certificate or intermediate certificates. For example you can see at facebook’s SSL certs, in the screenshot below. I can set monitoring on SSL cert for site which is expiring on 8 December, 2021. But first two highlighted certs [root certificate or intermediate certificate], I cannot. Is there any way to do it on Icinga ? Can anyone please suggest me anything.

Thank you very much in advance.

![image](https://community.icinga.com/uploads/default/original/2X/2/243872a620d9c7db9b9edcf46a8dd49499771c84.png)

---

<div class="post-metadata">

**Author:** ![platypus](https://community.icinga.com/letter_avatar_proxy/v4/letter/p/ba9def/32.png) [@platypus](https://community.icinga.com/u/platypus)\
**Post date:** [November 19, 2021, 3:54pm UTC](https://community.icinga.com/t/ssl-root-certificate-or-intermediate-certificate-monitoring/8409/2 "2021-11-19T15:54:12Z")

</div>

The check\_ssl\_cert plugin can (and does by default) check every elements of a certificate chain.

> **[GitHub - matteocorti/check\_ssl\_cert: A shell script (that can be used as a...](https://github.com/matteocorti/check_ssl_cert)**
>
> A shell script (that can be used as a Nagios/Icinga plugin) to check an SSL/TLS connection. - GitHub - matteocorti/check\_ssl\_cert: A shell script (that can be used as a Nagios/Icinga plugin) to che...