Mondays at 09:00

Check SSL certificates before they expire

Every Monday, your domains' certificates are checked and you get an email if any expire within 14 days.

Runs: Mondays at 09:00
Apps: Any web page, Email to you
AI: Not needed
Access: Connects to your domains' public HTTPS addresses; email to you

Send this to your assistant

Every Monday at 9, check the SSL certificates for clickruntime.com and app.example.com and email me if any expire in the next 14 days.

Paste it into your assistant. It tells you what it will send or change before it runs live.

Add to ChatGPT Add to Claude

First time? Adding ClickRuntime to your assistant takes about two minutes.

Why use it

Why teams use this automation

An expired SSL certificate takes a website offline for most visitors: browsers show a full-page security warning, checkouts stop working and API clients refuse to connect. Automatic renewal usually works, which is exactly why nobody notices when it quietly fails.

This template checks each of your domains every Monday and emails you if a certificate expires within 14 days. You get two weeks of warning instead of finding out from customers.

What you get out of it

Avoid outages
An expired certificate is one of the most common and most avoidable causes of downtime. Two weeks' notice is plenty of time to renew.
Protect revenue and trust
Security warnings scare visitors away and stop payments. Customers who see one may not come back.
Catch failed renewals
If automatic renewal breaks because of a DNS change or an expired card, you find out before it matters.
One place for every domain
Marketing sites, app domains, APIs and old landing pages are all checked together, including ones nobody remembers.
Nothing to install
No monitoring server or agent is needed. It works for any public domain.

How it works

What happens, step by step

Every Monday the script opens a TLS connection to each domain.
It reads the certificate's expiry date.
If any expire within 14 days, you get one email listing them.

Before it runs live

Nothing to connect.

What you get

RunsMondays at 09:00

Check SSL certificates before they expiretoday, 9:00Succeeded

Email · Certificatesapp.example.com expires in 9 days (21 Oct).

Build your own

Need it to work differently?

This template is a starting point. Copy the prompt and change it, or describe a different automation from scratch, with your own conditions, more apps or an AI step. Your assistant writes it, tests it and runs it on ClickRuntime.

Your own rules
Conditions, thresholds, filters and exceptions, written the way you'd explain them to a colleague.
Any number of apps
One automation can read from one app and update several others. Over 248 apps are ready, and anything with an API works too.
AI where it helps
Summaries, classification, extraction and drafts use ClickRuntime's built-in AI, with no extra key.
On a schedule or on each event
Runs as often as every 5 minutes, or the moment an app sends an event, and keeps track of what it already handled.

Changes you can ask for

Run it at a different time, more or less often, or only on weekdays
Add an AI step, for example to summarize, sort or draft a reply
Add another app, for example also send it to Slack
Combine it with other Any web page and Email to you steps into one automation

Under the hood

The code that runs this automation

This is the Python script that runs each time the automation starts. Your AI assistant writes it for you when you send the prompt, and you allow each step in your assistant. To change how the automation works, describe the change to your assistant and it updates the script for you. For every function it can use, see the script reference.

ssl_certificate_expiry.pyexample

import socket, ssl
from datetime import datetime, timezone
from clickruntime import on_trigger, notify

DOMAINS = ["clickruntime.com", "app.example.com"]

def days_left(host):
    with ssl.create_default_context().wrap_socket(socket.create_connection((host, 443), 10), server_hostname=host) as s:
        expires = datetime.strptime(s.getpeercert()["notAfter"], "%b %d %H:%M:%S %Y %Z")
    return (expires.replace(tzinfo=timezone.utc) - datetime.now(timezone.utc)).days

@on_trigger
def run(event):
    soon = {d: n for d in DOMAINS if (n := days_left(d)) < 14}
    if soon:
        notify.email_me("Certificates expiring soon", "\n".join(f"{d}: {n} days" for d, n in soon.items()))
    return soon

FAQ

Common questions

Can it check more often?

Yes. Any schedule down to every 5 minutes works.

Can I change the 14-day warning?

Yes. Ask your assistant for 30 days, 7 days or any number that suits how you renew.

Can it alert in Slack instead of email?

Yes. Connect Slack and ask your assistant to post warnings to a channel, such as #ops.

Does it work for internal domains?

It works for any domain reachable from the internet. Domains only reachable inside your network can't be checked.

What permissions does it need?

Connects to your domains' public HTTPS addresses; email to you. Nothing else in your accounts is used.

Does it need AI?

No. It runs without AI, so it doesn't use your plan's AI allowance.

How many runs does it use?

One run each time it runs (mondays at 09:00). Checks that find nothing to do and stop right away aren't counted.

Can I change how it works?

Yes. Describe the change to your AI assistant, for example a different schedule, channel or filter. It updates the automation, tests it and tells you what changed.

Every 5 minutes