Create an SSL Synthetic Test¶

SSL tests monitor the TLS/SSL certificate status of target domain names, including certificate validity period, issuing authority, and handshake performance. By configuring availability criteria such as certificate remaining days, the system can automatically trigger alerts when certificates are about to expire or handshakes are abnormal, helping you proactively avoid service interruption risks caused by certificate expiration.

Start Creating¶

Go to Synthetic Monitoring > Tasks, click Create Test, and select API Tests in the dialog to enter the configuration page.

Step 1: Select the Test Type¶

In the test type, select SSL.

Step 2: Define the Request Format¶

Configure access information for the target domain:

• Host: Enter the target domain name to be tested.
• Port: Enter the detection port. Default: 443.
• Test: Click to initiate a TLS handshake with the target Host to verify connectivity and obtain basic certificate information. The test result is only for configuration validation and is not saved as a test record.

After configuration, customize the test rule name (duplicate names are not supported in the current workspace).

Ignore Server Certificate Errors¶

For scenarios that require internal certificates, expand Advanced Settings, and under Certificate, check Ignore server certificate errors. This option is unchecked by default; after checking it, SSL tests ignore server certificate validation errors and continue execution.

This option controls certificate validation behavior. Whether the test succeeds is still determined by the availability criteria configured below.

Step 3: Success Criteria¶

Configure the criteria for a successful test. The test result is recorded as successful when all of the following conditions are met:

• Certificate remaining days: Select "greater than" or "less than" and enter a threshold in days.
• Response time: Select "less than" and enter a threshold in milliseconds.

Click "Add condition" to combine multiple rules. Only "All of the following conditions" is currently supported.

Step 4: Select Test Nodes¶

Select the nodes to run the test. You can select one or more nodes from China, overseas regions (Commercial Plan and above only), or self-hosted nodes to simulate certificate access from different regions.

Step 5: Select the Test Frequency¶

Select the execution frequency for the test task. Fixed options include 1 minute, 5 minutes, 10 minutes, 30 minutes, 1 hour, and 24 hours. You can also switch to Crontab mode and define a custom expression.

After configuration, click Save to create the SSL synthetic test.

View Test Results¶

Test List¶

After the SSL test runs, all execution records can be viewed in the test list, including status, execution time, rule name, Host, test node, failure type, and total elapsed time.

Test Details¶

Click a rule name in the list to enter the details page. The top displays status, execution time, task name, elapsed time, test node, and Host address.

The details page is divided into multiple tabs:

Test Performance

Displays performance metrics for this test, including TLS handshake duration.

Certificate Details

Displays certificate information for the target domain, including:

• Certificate status
• Expiration time
• Remaining days
• Issued to (CN)
• Issuing authority (CA)
• Certificate fingerprint

When the test fails, you can view the specific failure reason and corresponding metrics in the details.