# MariaDB / MySQL TLS certificate monitoring **URL:** \ **Category:** Exporters and Metrics\ **Created:** [April 28, 2026, 8:42pm UTC](https://discuss.prometheus.io/t/mariadb-mysql-tls-certificate-monitoring/3522 "2026-04-28T20:42:54Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![chr0mag](https://avatars.discourse-cdn.com/v4/letter/c/85f322/32.png) [@chr0mag](https://discuss.prometheus.io/u/chr0mag)\ **Post date:** [April 28, 2026, 8:42pm UTC](https://discuss.prometheus.io/t/mariadb-mysql-tls-certificate-monitoring/3522/1 "2026-04-28T20:42:54Z")
How are folks monitoring / alerting TLS certificate expiry for MariaDB / MySQL ? We typically do this via the blackbox\_exporter as we have common alerts across all systems that leverage the TLS metrics this exposes, but MariaDB requires an initial plain text greeting from the server and a specific SSL Request response from the client before a TLS session is established: [Connecting | Server | MariaDB Documentation](https://mariadb.com/docs/server/reference/clientserver-protocol/1-connecting/connection) . Has anyone successfully coerced the blackbox\_exporter TCP probe’s query\_response logic to handle this? Certificate dates are available via the GLOBAL STATUS query and the mysqld\_exporter had some functionality added to include this information as metrics: [Feature request: include collection of SSL expiration from SHOW GLOBAL STATUS output · Issue #457 · prometheus/mysqld\_exporter · GitHub](https://github.com/prometheus/mysqld_exporter/issues/457) . We are using this exporter but the certificate date metrics don’t show up, similar to the last comment in that issue. Other options include: - SSL Exporter - cert-exporter - text\_file exporter How are folks solving this?