SSL Monitor reports expired certificates that have already been updated

[josklever]

I’ve got 3 domains that are reported as “about to expire” via a daily email notification. In the monitor they show as already expired (i.e. 23 days ago) and when I do a check for that site, it takes minutes and seems to time out. The certificate details clearly show an old certificate, so it doesn’t seem to get refreshed. When I check the certificate via an external test, it shows the correct certificate. The websites haven’t been moved recently, so it’s not a DNS issue or something.

I’ve set the Action log to Debug, but nothing was logged for the check. I do see a 500 error in the browser console for admin-ajax.php and this doesn’t happen for other domains. Nothing was found in the PHP error log though.

I’m using SSL Monitor 4.0.5

[bojan (Bojan Katusic)]

Hi @josklever

@josklever

I’ve got 3 domains that are reported as “about to expire” via a daily email notification.

On what TLDs are these three domains, and are the three sites on a subdomain?

And can you please post the community system report from your MainWP Dashboard for review? The report is located in your Dashboard under Info → Server, on the top right of the page.

Be sure to use the button like the one below; this button hides all your private information:

Pressing the button auto-copies the report to your clipboard then just paste it in a reply here.

Also, please include the system report for the Child Site in question by navigating to MainWP Child > System Information and clicking the Blue button.

[josklever]

Two domains are .NL and one .ORG. They are not on a subdomain. They all are on cPanel hosting of Neostrada, but other sites on that host don’t have issues (yet).

I don’t actively use the SSL monitoring, but the daily (false) emails are annoying. So it’s not urgent for me.

Dashboard report:

### WordPress Check                Required                                               Detected                                     Status   ###

FileSystem Method                  = direct                                               direct                                       Pass        
MultiSite Disabled                 =true                                                  true                                         Pass        
WordPress Memory Limit             >=64M                                                  512M                                         Pass        
WordPress Version                  >=3.6                                                  6.3.2                                        Pass        

### PHP                            Required                                               Detected                                     Status   ###

cURL Extension Enabled             =true                                                  true                                         Pass        
cURL Timeout                       >=300 seconds                                          300                                          Pass        
cURL Version                       >=7.29.0                                               7.61.1                                       Pass        
OpenSSL Version                    >=OpenSSL/1.1.0                                        OpenSSL/1.1.1k                               Pass        
OpenSSL Working Status             Yes                                                    Yes                                          Pass        
PCRE Backtracking Limit            >=10000                                                1000000                                      Pass        
PHP Allow URL fopen                N/A                                                    YES                                                      
PHP Disabled Functions             N/A                                                    No functions disabled.                                   
PHP Exif Support                   N/A                                                    YES                                                      
PHP IPTC Support                   N/A                                                    YES                                                      
PHP Loaded Extensions              N/A                                                    Core, PDO, Phar, Reflection, SPL, SimpleXML, Zend OPcache, bcmath, calendar, ctype, curl, date, dom, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imagick, intl, ionCube Loader, json, libxml, litespeed, mbstring, mysqli, mysqlnd, openssl, pcre, pdo_mysql, pdo_sqlite, posix, random, redis, session, soap, sockets, sodium, sqlite3, standard, tokenizer, xml, xmlreader, xmlwriter, xsl, zip, zlib            
PHP Max Execution Time             >=30 seconds                                           30                                           Pass        
PHP Max Input Time                 >=30 seconds                                           60                                           Pass        
PHP Memory Limit                   >=128M                                                 512M                                         Pass        
PHP Post Max Size                  >=2M                                                   64M                                          Pass        
PHP Safe Mode Disabled             =true                                                  true                                         Pass        
PHP Upload Max Filesize            >=2M                                                   64M                                          Pass        
PHP Version                        >=7.4                                                  8.2.11                                       Pass        
PHP XML Support                    N/A                                                    YES                                                      
SSL Extension Enabled              =true                                                  true                                         Pass        
SSL Warnings                       = empty                                                                                             Pass        

### MySQL                          Required                                               Detected                                     Status   ###

MySQL Client Encoding              N/A                                                    utf8                                                     
MySQL Mode                         N/A                                                    ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION            
MySQL Version                      >=5.0                                                  10.11.5-MariaDB                              Pass        

### Server Configuration           Detected Value                                      ###

Accept Content                     text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Charset Content             N/A                                                    
Architecture                       64		 bit                                               
Gateway Interface                                                                         
HTTPS                              ON                                                     
Memory Usage                       11.77 MB                                               
Operating System                   Linux                                                  
Request Time                       1698409350                                             
Server Protocol                    HTTP/1.1                                               
Server self connect                Not expected HTTP response body:                       
Server Software                    LiteSpeed                                              
User Agent                         Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36

### MainWP Dashboard Settings      Detected Value                                      ###

Abandoned plugins/themes tolerance 365                                                    
Basic uptime monitoring enabled    No                                                     
MainWP Dashboard Version           Latest: 4.5.2 | Detected: 4.5.2 Pass                   
MainWP legacy backups enabled      No                                                     
Maximum number of comments         50                                                     
Maximum number of pages to return  50                                                     
Maximum number of posts to return  50                                                     
Maximum simultaneous install and update requests4                                                      
Maximum simultaneous requests      10                                                     
Maximum simultaneous requests per ip2                                                      
Maximum simultaneous sync requests 10                                                     
Minimum delay between requests     200                                                    
Minimum delay between requests to the same ip1500                                                   
Number of child sites              312                                                    
Optimize for shared hosting or big networksYes                                                    
Plugin advanced automatic updates enabledNo                                                     
Primary Backup System              MainWP UpdraftPlus Extension                           
REST API enabled                   No                                                     
Site health monitoring enabled     No                                                     
Theme advanced automatic updates enabledNo                                                     
Use WP Cron                        Yes                                                    
WP Core advanced automatic updates enabledNo                                                     

### Extensions                     Version                                                License                                      Status   ###

Activity Log for MainWP            2.1.1                                                                                                           
Advanced Uptime Monitor Extension  5.2.6                                                  Active                                       Pass        
Dashboard Lock                     4.0.2                                                  Active                                       Pass        
MainWP Cache Control Extension     4.0.3                                                  Active                                       Pass        
MainWP Code Snippets Extension     4.0.3                                                  Active                                       Pass        
MainWP Comments Extension          4.0.8                                                  Active                                       Pass        
MainWP Custom Dashboard Extension  4.1.2                                                  Active                                       Pass        
MainWP Database Updater Extension  4.0.4                                                  Active                                       Pass        
MainWP Domain Monitor Extension    4.0.6                                                  Active                                       Pass        
MainWP Favorites Extension         4.0.12                                                 Active                                       Pass        
MainWP File Uploader Extension     4.1.2                                                  Active                                       Pass        
MainWP Maintenance Extension       4.1.2                                                  Active                                       Pass        
MainWP SSL Monitor Extension       4.0.5                                                  Active                                       Pass        
MainWP Staging Extension           4.0.4                                                  Active                                       Pass        
MainWP Sucuri Extension            4.1                                                    Active                                       Pass        
MainWP UpdraftPlus Extension       4.0.10                                                 Active                                       Pass        
MainWP Wordfence Extension         4.0.10                                                 Active                                       Pass        

### Plugin                         Version                                                Status                                    ###

Activity Log for MainWP            2.1.1                                                  Active                                       
MainWP Child                       4.5.2                                                  Active                                       
MainWP Dashboard                   4.5.2                                                  Active                                       
Performant Translations            1.0.6                                                  Active                                       
UpdraftPlus - Backup/Restore       2.23.10.26                                             Active                                       
Wordfence Security                 7.10.5                                                 Active                                       

Child report (of one of the sites):

### Serverconfiguratie             Vereiste waarde                                        Waarde                                       Status   ###

MAINWP CHILD                       
                                   MainWP Child Version                                   4.5.2                                        4.5.2       Pass        
WordPress                          
                                   WordPress Version                                      >=3.4                                        6.3.2       Pass        
                                   WordPress Memory Limit                                 >=64M                                        256M        Pass        
                                   MultiSite Disabled                                     =true                                        true        Pass        
                                   Bestand systeem methode                                = direct                                     direct      Pass        
PHP-INSTELLINGEN                   
                                   PHP Version                                            >=7.4                                        8.1.24      Pass        
                                   PHP veilige modus uitgeschakeld                        UIT                                          
                                   PHP Max Execution Time                                 >=30 seconds                                 30          Pass        
                                   PHP Max Input Time                                     >=30 seconds                                 -1          Pass        
                                   PHP Memory Limit                                       >=128M (256M+ best for big backups)          256M        Pass        
                                   PCRE Backtracking Limit                                >=10000                                      1000000     Pass        
                                   PHP Upload Max Filesize                                >=2M (2MB+ best for upload of big plugins)   8M          Pass        
                                   PHP Post Max Size                                      >=2M (2MB+ best for upload of big plugins)   32M         Pass        
                                   SSL Extension Enabled                                  =true                                        true        Pass        
                                   SSL Warnings                                           = empty                                                  Pass        
                                   cURL Extension Enabled                                 =true                                        true        Pass        
                                   cURL Timeout                                           >=300 seconds                                60          Warning     
                                   cURL Version                                           >=7.18.1                                     7.87.0      Pass        
                                   cURL SSL Version                                       >=OpenSSL/1.1.0                              OpenSSL/1.1.1wPass        
                                   OpenSSL Working Status                                 Yes                                          Yes         Pass        
MySQL-INSTELLINGEN                 
                                   MySQL Version                                          >=5.0                                        10.5.22-MariaDBPass        
BACK-UP ARCHIEF INFORMATIE         
                                   ZipArchive enabled in PHP                              =true                                        true        Pass        
                                   Tar GZip supported                                     =true                                        true        Pass        
                                   Tar BZip2 supported                                    =true                                        true        Pass        
SERVERINFORMATIE                   
                                   WordPress root folder                                  /home/master2q/removed/httpd.www/      
                                   Server naam                                            removed                             
                                   Server software                                        Apache                                       
                                   Besturingssysteem                                      Linux                                        
                                   Architectuur                                           64 bit                                       
                                   Server-IP                                              removed            
                                   Server protocol                                        HTTP/2.0                                     
                                   HTTP host                                              removed                            
                                   HTTPS                                                  AAN - on                                     
                                   Server maakt zelf verbinding                           Onverwachte HTTP reactie body:               
                                   Useragent                                              Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
                                   Server poort                                           443                                          
                                   Gateway interface                                                                                   
                                   Geheugengebruik                                        105.54 MB                                    
                                   Complete URL                                           https://removed/wp-admin/index.php     
                                   Aanvraag tijd                                          1698409726                                   
                                   Inhoud accepteren                                      text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                   Accept Charset inhoud                                  N/B                                          
                                   Script dat momenteel wordt uitgevoerd padnaam          /home/master2q/removed/httpd.www/wp-admin/options-general.php
                                   Huidige pagina URI                                     /wp-admin/options-general.php?page=mainwp_child_tab
                                   Adres op afstand                                       2a02:a464:dcd:1:9dbb:d75a:a36e:d74e          
                                   Remote host                                            N/A                                          
                                   Remote poort                                           51792                                        
PHP-INFORMATIE                     
                                   PHP Allow URL fopen                                    AAN                                          
                                   PHP Exif ondersteuning                                 JA ( V8.1.)                                  
                                   PHP IPTC ondersteuning                                 JA                                           
                                   PHP XML ondersteuning                                  JA                                           
                                   PHP uitgeschakelde functies                            Geen functies uitgeschakeld                  
                                   PHP geladen extensies                                  Core, PDO, PDO_ODBC, Phar, Reflection, SPL, SimpleXML, bcmath, bz2, calendar, ctype, curl, date, dba, dom, enchant, exif, fileinfo, filter, ftp, gd, gettext, hash, iconv, imagick, imap, intl, json, ldap, libxml, litespeed, mbstring, mysqli, mysqlnd, odbc, openssl, pcntl, pcre, pdo_mysql, pdo_pgsql, pdo_sqlite, pgsql, posix, pspell, readline, session, shmop, snmp, soap, sockets, sqlite3, standard, sysvmsg, sysvsem, sysvshm, tidy, tokenizer, xml, xmlreader, xmlwriter, xsl, zip, zlib
MySQL INFORMATIE                   
                                   MySQL modus                                            NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION   
                                   MySQL client codering                                  utf8mb4                                      
WordPress PLUGINS                  
                                   Elementor                                              3.17.1                                       Actief                  
                                   Elementor Pro                                          3.17.0                                       Actief                  
                                   GTM4WP                                                 1.18.1                                       Actief                  
                                   MainWP Child                                           4.5.2                                        Actief                  
                                   Popup Builder                                          4.2.0                                        Actief                  
                                   Premium Addons for Elementor                           4.10.14                                      Actief                  
                                   Redirection                                            5.3.10                                       Actief                  
                                   Smush                                                  3.14.2                                       Actief                  
                                   Swift Performance                                      2.3.6.13                                     Actief                  
                                   Wordfence Security                                     7.10.5                                       Actief                  
                                   Yoast SEO                                              21.4                                         Actief                  

### Volgende vervalling            Schema                                                 Hook                                      ###

27 oktober 2023 14:25              Eenmaal per uur                                        wp_privacy_delete_old_export_files           
27 oktober 2023 14:28                                                                     smush_check_for_conflicts                    
27 oktober 2023 14:28                                                                     swift_performance_prebuild_cache             
27 oktober 2023 14:33                                                                     wordfence_processAttackData                  
27 oktober 2023 14:48              Eenmaal per uur                                        wordfence_ls_ntp_cron                        
27 oktober 2023 14:48              Eenmaal per uur                                        wordfence_hourly_cron                        
27 oktober 2023 14:59              Tweemaal per dag                                       wp_update_user_counts                        
27 oktober 2023 16:53              Tweemaal per dag                                       wp_https_detection                           
27 oktober 2023 17:08              Tweemaal per dag                                       swift_performance_api_messages               
27 oktober 2023 17:35              Tweemaal per dag                                       puc_cron_check_updates-swift-performance     
27 oktober 2023 21:54              Eenmaal per dag                                        redirection_log_delete                       
27 oktober 2023 22:25              Eenmaal per dag                                        recovery_mode_clean_expired_keys             
27 oktober 2023 22:25              Tweemaal per dag                                       wp_version_check                             
27 oktober 2023 22:25              Tweemaal per dag                                       wp_update_plugins                            
27 oktober 2023 22:25              Tweemaal per dag                                       wp_update_themes                             
27 oktober 2023 22:26              Eenmaal per dag                                        wp_scheduled_delete                          
27 oktober 2023 22:26              Eenmaal per dag                                        delete_expired_transients                    
27 oktober 2023 22:26              Eenmaal per dag                                        wp_scheduled_auto_draft_delete               
27 oktober 2023 22:31              Eenmaal per dag                                        elementor/tracker/send_event                 
27 oktober 2023 23:08              Eenmaal per dag                                        sgpbGetNotifications                         
28 oktober 2023 00:39              Eenmaal per dag                                        mainwp_cronpingchilds_action                 
28 oktober 2023 01:03              Eenmaal per dag                                        pum_daily_scheduled_events                   
28 oktober 2023 02:00              Eenmaal per dag                                        wdev_logger_clear_logs                       
28 oktober 2023 10:48              Eenmaal per dag                                        wordfence_daily_cron                         
28 oktober 2023 11:09              Eenmaal per dag                                        swift_performance_collect_anonymized_data    
28 oktober 2023 12:41              Eenmaal per dag                                        wpseo-reindex                                
28 oktober 2023 12:41              Eenmaal per dag                                        wpseo_permalink_structure_check              
28 oktober 2023 12:41              Eenmaal per dag                                        wpseo_home_url_check                         
28 oktober 2023 12:58              Eenmaal per dag                                        wpseo-reindex-links                          
29 oktober 2023 07:40                                                                     wordfence_start_scheduled_scan               
1 november 2023 07:40                                                                     wordfence_start_scheduled_scan               
1 november 2023 17:40              Eens per week                                          wp_delete_temp_updater_backups               
3 november 2023 01:03              Eens per week                                          pum_weekly_scheduled_events                  
3 november 2023 09:13              Eens per week                                          wp_site_health_scheduled_check               

### Tijd                           Fout                                                ###

[bojan (Bojan Katusic)]

Thanks for the additional info.

I’ve edited your post to remove the Child Site URL and the Server IP from the system report.

I’ve then tested out that problematic URL by editing a child site in the database of our test Dashboard, and then I ran the SSL Checker.

I didn’t experience any timeouts or console errors and the data returned was accurate.

Can you try setting your Action Logs, run a check and see if anything relevant gets logged?

If you’re not seeing the SSL Checker in the dropdown on the Action Logs page, you may need to temporarily deactivate the Cache Control and Domain Monitor extensions.

[josklever]

Hi @bojan,

I’ve disabled Cache Control and Domain Monitor, but SSL monitor didn’t show up yet in Action Logs. After I disabled all extensions starting with [A-M], the SSL Monitor showed up in the list, but it still gave a 500 error after about 30 seconds.

This was logged:
2023-10-27 16:55:31 [INFO] SSL Monitor:: CRON :: CONTINUE total urls to check :: 1

Next I disabled all other extensions and tried again. Still a timeout and nothing logged.

Same result after disabling all non MainWP plugins and even after disabling MainWP Child on my dashboard.

So now I’m thinking about a firewall issue and I noticed a few IPv6 addresses on my blocklist, that are in the same range as those of the 3 sites (although different). I’ll test it again after the list has been reloaded on my server.

[josklever]

Unblocking the IPs didn’t help yet, so I might have to test it later by disabling my firewall completely.

In the PHP error log I did find some information now (domain names and paths have been redacted):

PHP Warning:  stream_socket_client(): Unable to connect to ssl://example.nl:443 (Connection timed out) in /.../wp-content/plugins/mainwp-ssl-monitor-extension/class/class-mainwp-ssl-monitor-utility.php on line 275
PHP Fatal error:  Uncaught TypeError: stream_context_get_params(): Argument #1 ($context) must be of type resource, bool given in /.../wp-content/plugins/mainwp-ssl-monitor-extension/class/class-mainwp-ssl-monitor-utility.php:276
Stack trace:
#0 /.../wp-content/plugins/mainwp-ssl-monitor-extension/class/class-mainwp-ssl-monitor-utility.php(276): stream_context_get_params()
#1 /.../wp-content/plugins/mainwp-ssl-monitor-extension/class/class-mainwp-ssl-monitor-dashboard.php(438): MainWP\Extensions\SSL_Monitor\MainWP_SSL_Monitor_Utility::get_ssl_certificate_info()
#2 /.../wp-includes/class-wp-hook.php(310): MainWP\Extensions\SSL_Monitor\MainWP_SSL_Monitor_Dashboard->ajax_ssl_check()
#3 /.../wp-includes/class-wp-hook.php(334): WP_Hook->apply_filters()
#4 /.../wp-includes/plugin.php(517): WP_Hook->do_action()
#5 /.../wp-admin/admin-ajax.php(188): do_action()
#6 {main}
  thrown in /.../wp-content/plugins/mainwp-ssl-monitor-extension/class/class-mainwp-ssl-monitor-utility.php on line 276

[josklever]

When I disable the firewall on my server, the check works. It appeared that the IPv4 address of these sites were blocked by a subnet, so I removed that block.

Problem solved.