Apify SSL Certificate Monitoring + Gmail Renewal Alerts (n8n)

Stay ahead of expiring SSL certificates with automatic Gmail renewal alerts in n8n

This n8n workflow checks the TLS/SSL status of your configured domains every Monday and automatically emails a single Gmail digest listing domains that are expiring within 30 days—or any domain whose TLS status is not OK.

What this workflow does

• Runs on a schedule: Executes every Monday at 07:00.
• Loads monitoring settings: Reads the domain list, the warning window (warn_within_days), and the recipient address (alert_email) from the workflow configuration.
• Audits certificates via Apify: Calls the Apify Actor sterlingworks/site-health-audit using an HTTP request to audit each domain and return TLS status plus certificate details.
• Filters for action: Keeps only domains where the certificate expires within the configured warning window or where the TLS status is not OK.
• Sends one digest email: Aggregates flagged results and sends a plain-text Gmail renewal warning including TLS status, days left, expiry date, and issuer for each domain.

Use cases

• SaaS operators tracking multiple client-facing domains who want proactive certificate renewal reminders.
• Automation engineers needing reliable SSL/TLS monitoring workflows inside n8n.
• Security-minded teams who want alerts not only for expiry, but also for any non-OK TLS status.

Technical details

• Scheduling: n8n schedule trigger running every Monday at 07:00.
• Apify integration: HTTP Request to Apify Actor sterlingworks/site-health-audit using an API token (e.g., Authorization: Bearer <token>).
• Core nodes mentioned: set, http request, filter, aggregate, gmail, plus workflow documentation elements (e.g., sticky note).

Setup requirements

• Create an Apify account, generate an API token, and store it in an n8n HTTP Header Auth credential.
• Connect Gmail in n8n using Gmail OAuth2 credentials.
• Update the domain list, warn_within_days, and alert_email in the monitoring configuration step before enabling.