SSL Report Issue

Question

HI Greetings!

I'm am fetching the SSL certificate expiry report that give me the remaining days of certificate expiry date, I'm using the IIS certificate template for this report,

the issue is everything in report is alright but remaining days column gives incorrect days kindly someone help me on this issue,

the details of the first node are attached also

Arwen · Answer

Hi,

Good Day

Thanks for your response ,

* we are already on the  SolarWinds 2026.2 version and issue still exist.
* we are using the ssl certificate expiry date certificate also for the correct days remaining.
* How can i resolve issue of old report fetching using iis template because there are some other columns that are not available in  this ssl certificate expiry date certificate template like start date , end date and port.

mr.castaneda · Answer

You’re not doing anything wrong here—this is a known behavior with the IIS SSL Certificate Expiration report/AppInsight for IIS, not with your report definition.

In older platform/SAM builds, the “Days Remaining” value for AppInsight‑for‑IIS SSL bindings is only calculated once when AppInsight for IIS is first assigned to the site, and it’s not updated daily afterwards. The underlying certificate dates are correct, which is why the component can already show “Certificate Expired” while the Days Remaining column is still stuck on an old value (like 37 days in your screenshot).

That’s exactly why:

* Your Start / Expiration Date columns in the IIS SSL Certificate Expiration report look right.
* The Days Remaining column can be wrong or stop changing over time, even after the cert has already expired.

This was addressed in later versions of the platform/SAM, and the official guidance is:

* Upgrade to the latest supported version of SolarWinds Observability Self‑Hosted / SAM
The fix for the stale SslDaysRemaining value was delivered in a later SAM release and is included in current platform/SWOSH versions. If you’re on an older build, upgrading is the long‑term resolution.
* Workaround on existing versions—use the standalone SSL monitor instead of the IIS report
Until you can upgrade, you can get an accurate, daily‑updated “days remaining” value by:* Assigning the “SSL Certificate Expiration Date Monitor” (SAM template) to the affected IIS nodes/sites.
* Building your alerts or custom reports from that template’s metrics, instead of relying on the Days Remaining column from the IIS SSL Certificate Expiration report.

That approach gives you correct “days until expiry” numbers and reliable alerting today, and once you’re on a newer version, the IIS SSL report’s Days Remaining column should also behave as you’d expect.

Hope that clears up why you’re seeing the mismatch and gives you a path forward both short‑ and long‑term.