Monitor SSL certificates for expiry

Works for TLSv1 and higher. Older protocols don't support SNI, so it
may not work there.