Certificate Expiry does not test local server

Configuration
1

I am running Home Assistant OS version 2025.10.1 on a VM and have the Certificate Expiry Integration installed.

I am running a Cloudflare tunnel to my local network. Cloudflare provides a certificate for mydomain.org and *.mydomain.org. The expiry is 11 Dec.

I have a Lets Encrypt certificate installed on my HA server - homeassistant.mydomain.org and the expiry date was 6 Oct. I can see this by running openssl s_client -showcerts -connect serverip:8123

I have configured the Certificate Expiry with homeassistant.mydomain.org:8123, but this is showing an expiry of 11 Dec (presumably because it is checking the public address.

I have tried configuring it to be serverip.8123, but this gives an error, as the certificate does not match.

Is there any way to setup an entity that checks the certificate on the local server?

2

your host name 'homeassitant.mydomain.org is covered with the wildcard on cloudfrlare. So there the ssl is not expired yet.
How did you obtain the lets encrypt certificate initally then?

3

I got the initial HA certificate using the Lets Encrypt Add on - but before I setup the Cloudflare tunnel.

4

yeah… there you go… turn of the tunnel and that process will work again.

so with the tunnel, you dont need a local cert anymore. Any reason for keeping it ?