Raw TLS handshake and certificate validity at a host:port (any TLS service, not just HTTPS).
Every TLS monitor runs on the same spine as the rest of PulseTrace — probed from each region you pick, scored on every check, and streamed into one timeline where incidents open on their own, anomalies surface without a threshold to guess, and reports are generated for you. Point it at a target, choose an interval, and it's watched.
What each check verifies
The panel on the right is the real create-monitor screen — it fills itself in with a TLS example, exactly what you'd type.
For any TLS endpoint where the certificate matters and you want a light check on every plan: HTTPS hosts, SMTP with STARTTLS, IMAP/POP, database TLS listeners. It verifies the handshake and tracks expiry; the SSL/TLS Security monitor adds the full grade.
mail.example.com:465 certificate expires in 7 days (2026-09-11) — issued by Let's Encrypt.