Complete SSL Monitoring Manual
Your comprehensive guide to dashboard, scanner, TLD scanning, and SSL status monitoring
Quick Start - Get Monitoring in 5 Minutes
-
🚀 Start with Auto Query (Recommended):
Click "Auto Query" in your dashboard for instant comprehensive discovery. This automatically finds subdomains, gathers TLD administrative data, and checks connectivity on ports 21/22/80.
Why start here: No file preparation needed - just click and let the system discover your infrastructure automatically. -
📁 Or Upload Your Domain List (Alternative Start):
If you prefer to monitor specific known domains, create a .txt file with one domain per line. Click "Upload File" button, select your file, add a description.example.com mail.example.com www.example.comWhen to use: When you have a specific list of domains to monitor or want to supplement Auto Query results. -
🔍 Analyze Your Results:
After Auto Query completes or after uploading files, click "View Status" → Click "Scan SSL" to analyze certificates.
Use the ViewTLD Dashboard to explore detailed certificate information, geolocation data, and security status. -
🌐 Expand with TLD Brand Scanning (Optional):
Click "Check TLD" to scan ~400 top-level domains for your brand name across different extensions.
Found domains are automatically added to your monitoring dashboard for comprehensive brand protection. -
📊 Monitor Your Results:
✅ Valid = Good (30+ days) ⚠️ Expiring = Renew Soon ❌ Expired = Critical ⚫ Offline = Check Server -
📧 Validate Email for Reports (Optional):
Use an email that matches your domain (e.g., admin@yourcompany.com to monitor yourcompany.com).
Click the validation status badge in the dashboard header and follow the email link.
Note: Email validation is only required for automated email reports. All on-screen functionality works without validation. -
🔄 Ongoing Monitoring:
Dashboard auto-refreshes with real-time status updates. Export results as CSV for external analysis.
Set up email reports for expiring certificates by completing email validation above.
Upload File: Monitor specific domains you already know
Scan SSL: Check certificates for uploaded domains
Check TLD: Find your brand across 400+ domain extensions
Scan taking long? Large domains need time, try smaller batches
Domain offline? Check spelling and DNS resolution
TLD scan slow? ~400 domains take several minutes to query
File Upload: Format requirements
SSL Scanner: Full scanning features
TLD Scanning: Brand protection guide
Security Analysis: TLS versions, headers, vulnerabilities
Brand Protection: TLD monitoring across 400+ extensions
Real-time Status: Online/offline monitoring with auto-refresh
Getting Started
System Overview
Scantide SSL Monitoring provides a complete solution for monitoring SSL certificates, analyzing domain security, protecting your brand across TLDs, and managing your web infrastructure. The platform consists of four main components working together to give you comprehensive security insights.
Email Validation System
Why Email Validation Exists:
When You Need Email Validation:
Validation Process (If Needed):
-
Domain Matching: Your email domain must match the domains you want to scan
Example: To scan example.com, use user@example.com
- Click Validation Status: Click your validation status badge in the dashboard header to send a validation email
- Check Your Email: Look for the validation email in your inbox (check spam folder too)
- Click Validation Link: Click the link in the email to complete validation
Validation Status Indicators:
File Upload & Management
Uploading Domain Lists:
- Click Upload Button: Use the blue "Upload File" button in your dashboard
- Select .txt File: Choose a text file containing domain names (one per line)
- Add Description: Optionally add a comment to describe this file's purpose
- Submit Upload: Click "Upload File" to process your domain list
- Start Monitoring: Click the "View Status" button to begin monitoring your domains
File Format Requirements:
Content: One domain per line
Size Limit: Reasonable file sizes (up to several MB)
Encoding: UTF-8 text encoding preferred
Invalid: https://example.com, http://...
Wildcards: Not supported in uploads
Dashboard Actions & Features
• Subdomain Discovery: Automatically discovers and queries unique FQDNs for your domain
• TLD Administrative Data: Gathers Top Level Domain administrative information and registration details
• Port Scanning: Checks for hosts online but not responding to SSL on ports 21 (FTP), 22 (SSH), and 80 (HTTP)
• Online/Offline Status: Validates if discovered domains are online or offline
When to use: Perfect for comprehensive domain discovery and initial infrastructure scanning. Also identifies potentially forgotten or rogue servers across your domain infrastructure.
Important Note: Auto Query does NOT scan for online hosts within discovered domains - that advanced functionality is provided by the "Scan TLD" button for deeper infrastructure analysis.
Process Duration: For large domains, this may take several minutes as it queries multiple data sources and performs connectivity tests across discovered infrastructure.
When to use: When you already know all your servers and want to start monitoring quickly. After upload, you can still use Auto Query to discover additional FQDNs.
Pro Tip: Use the consolidate feature afterward to organize and merge multiple uploaded files.
When to use: After uploading multiple files or when you want to clean up your domain lists for easier management.
Result: Creates a new consolidated file with all unique domains from your uploaded files.
When to use: When you want to start fresh or clean up your dashboard completely.
Warning: This action cannot be undone. Make sure you have backups of important data before using this feature.
Coverage includes: Popular TLDs (.com, .net, .org), country codes (.uk, .de, .jp), and new generic TLDs (.tech, .online, .store).
Automatic integration: Any discovered domains are automatically added to your dashboard for ongoing SSL monitoring and security analysis.
When to use: When you want to focus on active domains or need to quickly identify which servers are currently operational.
Filter toggle: Click again to show all domains (both online and offline) or use other filter options to customize your view.
TLD Brand Scanning
What is TLD Scanning?
TLD (Top-Level Domain) scanning is a comprehensive brand monitoring feature that automatically checks if your brand name or company name is registered across hundreds of different domain extensions. This powerful tool helps identify potential trademark infringement, cybersquatting, and brand impersonation attempts across the global domain landscape.
Coverage includes: Popular TLDs (.com, .net, .org), country codes (.uk, .de, .jp), and new generic TLDs (.tech, .online, .store).
Automatic integration: Any discovered domains are automatically added to your dashboard for ongoing SSL monitoring and security analysis.
Brand Variants: Searches for exact matches, common misspellings, and brand variations.
Real-time Results: Shows which domains are registered, active, and potentially using your brand name.
Trademark Monitoring: Helps protect your intellectual property and brand reputation.
Competitor Analysis: Discover how competitors might be using similar domain names.
SSL Monitoring: All discovered domains are included in SSL certificate monitoring.
Status Tracking: Monitor the ongoing status and security of brand-related domains.
How TLD Scanning Works:
-
Brand Name Input: The system uses your verified email domain as the base brand name for scanning
If your email is admin@yourcompany.com, it scans for "yourcompany" across all TLDs
-
TLD Query Process: Systematically checks your brand name against ~400 top-level domains including:
• Generic TLDs: .com, .net, .org, .info, .biz
• Country codes: .uk, .ca, .au, .de, .fr, .jp, .cn
• New gTLDs: .tech, .online, .store, .app, .dev, .io -
Domain Verification: Checks if discovered domains are:
• Registered and active
• Responding to network requests
• Properly configured with DNS - Dashboard Integration: Active domains containing your brand are automatically added to your monitoring list for ongoing SSL and security analysis
- Monitoring Activation: All discovered domains become part of your regular SSL certificate monitoring and security scanning
Scan TLD Button (Status View)
What is the Scan TLD Button?
When you're viewing the status page of any uploaded file, the "Scan TLD" button provides advanced analysis capabilities specifically designed to work with domains discovered through TLD brand scanning. This feature automatically performs comprehensive subdomain discovery and infrastructure mapping for TLD-discovered domains.
Functionality: Works exactly like the "Auto Query" button in the main dashboard, but specifically targets TLD-discovered domains.
Results: Creates separate files in your dashboard for each TLD domain that has discoverable subdomains or infrastructure.
DNS Record Analysis: Analyzes DNS configuration, MX records, CNAME chains, and other technical details.
Service Discovery: Identifies web services, mail servers, and other network services running on discovered subdomains.
File Status Page Actions
When to use: To get detailed SSL certificate information and identify potential security issues or upcoming expirations.
Results: Generates a detailed report showing certificate status, expiration dates, issuer information, and any security warnings.
When to use: When you need a local copy of your domain list for backup, editing, or sharing with team members.
Format: Downloads as the original .txt file format with one domain per line.
When to use: For reporting, analysis, or importing data into other security tools and monitoring systems.
Content: Includes domain names, SSL status, certificate details, expiration dates, and scan timestamps.
View Status Interface
Accessing View Status
- From Dashboard: Click the "View Status" button next to any uploaded file in your main dashboard
- Direct Access: Bookmark the status page URL for quick access to frequently monitored domain lists
- Auto-Refresh: The status page automatically updates to show the latest certificate and domain information
Interface Components
Sortable Columns: Click any column header to sort by domain name, SSL status, expiration date, or other criteria.
Interactive Elements: Click on domains, certificate details, or status indicators for detailed popup information.
Search Functionality: Real-time search across domain names, certificate issuers, and other data.
Status Categories: Filter by specific SSL certificate statuses or expiration timeframes.
Progress Bars: Visual representation of time remaining until certificate expiration.
Badge System: Clear status badges with icons for quick status identification.
Export Options: Download results as CSV, JSON, or generate printable reports.
Management Tools: Remove offline domains, consolidate data, or clean up entries.
Status Information Display
Certificate Authority: Issuing CA information, certificate type, and trust chain status.
Domain Coverage: Primary domain and Subject Alternative Names (SAN) coverage details.
Nameservers: DNS configuration and CNAME chain information.
Geolocation: Server location data for compliance and performance analysis.
Next Update: Scheduled time for automatic status refresh.
Scan History: Historical data showing certificate changes over time.
Configuration Issues: Identification of SSL setup problems or security concerns.
Connectivity Problems: Alerts for domains that become unreachable or offline.
Interactive Features
Status Indicators: Click status badges for comprehensive SSL information and recommendations.
Certificate Details: Interactive popups showing full certificate chain and technical details.
PDF Reports: Generate professional reports for stakeholders and compliance.
Raw Data: Export JSON format for integration with other monitoring tools.
Manual Refresh: Force immediate update of specific domains or entire list.
Change Notifications: Visual indicators when certificate status changes occur.
Alert Thresholds: Configure when certificates should be flagged as expiring.
Display Preferences: Customize how information is presented and organized.
Available Actions from View Status
- Scan SSL: Initiate comprehensive SSL certificate analysis for all domains in the current file
- Download File: Get a local copy of the original domain list for backup or modification
- Export Results: Download current status data in various formats (CSV, PDF, JSON)
- Scan TLD: Perform advanced TLD analysis for domains discovered through brand scanning
- Refresh Data: Force immediate update of SSL certificate status for all domains
- Clean Up: Remove offline domains or consolidate duplicate entries automatically
- Individual Domain Actions: Remove specific domains, check individual certificates, or analyze single domains in detail
Understanding the Status Display
Expiration Timeline: Visual timeline showing when certificates will expire over the coming months.
Trend Analysis: Historical data showing how your SSL certificate health has changed over time.
Upcoming Renewals: Certificates expiring within 30, 60, or 90 days clearly marked.
Health Scores: Overall SSL health scoring for quick assessment of your infrastructure.
Mobile and Responsive Features
Responsive Layout: Table automatically adjusts to different screen sizes and orientations.
Simplified Mobile View: Essential information prioritized for smaller screens.
Efficient Updates: Only changed data is refreshed to minimize bandwidth usage.
Cached Results: Previous scan results cached for immediate display while new data loads.
SSL & Domain Scanner
Comprehensive Scan Features:
Why it matters: SSL certificates encrypt data between your website and visitors. Expired or invalid certificates trigger browser warnings, damage user trust, and can lead to data breaches.
Why it matters: Older TLS versions have known vulnerabilities and are deprecated by security standards.
Why it matters: Open ports represent potential attack vectors and unnecessary services increase your attack surface.
Why it matters: Security headers protect against common web attacks like XSS, clickjacking, and protocol downgrade attacks.
SSL Status View Guide
Key Features:
Automated status: Categorizes certificates as valid, expiring, expired, or offline.
Chain validation: Verifies complete certificate chains for proper SSL implementation.
Advanced filtering: Use search and quick filters to find specific domains.
Export functionality: Download results as CSV for external analysis.
Batch operations: Process multiple domains efficiently.
Smart filtering: Quick access to domains by status categories.
ViewTLD Dashboard - Advanced SSL Monitoring
Dashboard Overview
The ViewTLD Dashboard is accessed when you click "View Status" on any uploaded file. It transforms your simple domain list into a powerful monitoring interface with real-time SSL certificate analysis, geolocation data, registrar information, and advanced management capabilities.
Automatic Updates: Dashboard refreshes automatically to show the latest information.
Parallel Processing: Efficiently scans multiple domains simultaneously for fast results.
WHOIS Integration: Registrar data, creation dates, nameservers, and contact information.
Infrastructure Data: Geolocation, IP addresses, CNAME chains, and hosting details.
Advanced Filtering: Quick filters for status types, search functionality, and sortable columns.
Contextual Actions: Domain-specific actions like TLD scanning and entry removal.
Cleanup Features: Automatically separate online/offline domains and remove problematic entries.
Export Options: Download results and export data for external analysis.
Understanding Status Indicators & Scanning Methods
Scanning Method Comparison:
What it finds: FQDNs, TLD admin data, hosts on ports 21/22/80
Does NOT do: Deep infrastructure scanning within discovered domains
Best for: Initial domain discovery and infrastructure mapping
What it finds: Complete subdomain enumeration and service discovery
Creates: Separate monitoring files for each analyzed domain
Best for: Comprehensive analysis after TLD brand scanning
What it analyzes: Certificate validity, expiration, chain integrity
Works with: Uploaded domain lists and discovered domains
Best for: Regular certificate monitoring and security assessment
What it finds: Domains using your brand name across different TLDs
Integration: Automatically adds discovered domains to monitoring
Best for: Brand protection and cybersquatting prevention
SSL Certificate Status Types:
Expiration: More than 30 days remaining before expiration.
Action needed: None - certificate is functioning correctly.
Priority: High - renewal should be scheduled immediately.
Risk: Service interruption if not renewed before expiration date.
Priority: Critical - immediate action required.
Impact: Users see security warnings, potential loss of trust and traffic.
Possible causes: Server downtime, DNS issues, or domain deactivation.
Investigation needed: Check server status and DNS configuration.
Troubleshooting Common Issues
Solution: Ensure all intermediate certificates are properly installed on the server. Contact your hosting provider if needed.
SSL Management Best Practices
- Start with Auto Query: Begin monitoring by using Auto Query for comprehensive domain discovery before uploading specific files
- Proactive Monitoring: Set up automated alerts for certificates expiring within 30-60 days using the dashboard monitoring features
- Certificate Lifecycle Management: Maintain a centralized inventory of all SSL certificates with renewal dates using file upload and status tracking
- Brand Protection: Run TLD scans regularly to monitor for unauthorized use of your brand across different domain extensions
- Security Headers: Implement HSTS, CSP, and other security headers to enhance HTTPS protection as identified by scanner reports
- Regular Audits: Perform monthly SSL scans using the comprehensive scanner to identify configuration issues and security vulnerabilities
- Email Validation (Optional): Validate your email only if you want automated email reports - all functionality works without validation
- Documentation: Use file comments and export features to maintain detailed records of your SSL infrastructure and any issues found
- Advanced Analysis: Use the "Scan TLD" button after TLD brand scanning to get comprehensive infrastructure analysis of discovered domains
- ViewTLD Dashboard Utilization: Leverage the advanced ViewTLD Dashboard features for real-time monitoring, interactive data analysis, and comprehensive reporting
Security & Privacy Commitment:
Help and Support
Account Questions: Email validation, access issues, or feature requests.
Response Time: Typically within 24 hours during business days.
Video Tutorials: Visual guides for complex procedures available on our website.
Updates: Check the Scantide website for the latest feature announcements and updates.
Feature Requests: Suggest improvements or new functionality through our contact form.
Brand Protection: Report suspected brand abuse or cybersquatting discovered through TLD scanning.