TLS & Domain Hygiene • Every 6 hours + 30/14/7-day expiry warnings
2. SSL/TLS Certificate Chain & Redirect Hygiene Check
What We Verify: X.509 certificate validity window, intermediate chain completeness, HTTP-to-HTTPS redirect hops, and apex-to-www canonical alignment.
Silent Failure Prevented: Prevents expired Let's Encrypt/Cloudflare origin certificates, broken redirect loops, or HSTS lockouts from blocking prospective buyers.
Sample Alert / Verification Log:
[ONBITS-MONITOR] WARNING: TLS certificate for example.com expires in 14 days (Issuer: Let's Encrypt, Serial: 04:3A...).