# TLS certificate monitoring without hostname verification
**URL:** https://discuss.elastic.co/t/tls-certificate-monitoring-without-hostname-verification/359752
**Category:** Beats
**Tags:** heartbeat
**Created:** [May 18, 2024, 6:32pm UTC](https://discuss.elastic.co/t/tls-certificate-monitoring-without-hostname-verification/359752 "2024-05-18T18:32:24Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [May 18, 2024, 6:32pm UTC](https://discuss.elastic.co/t/tls-certificate-monitoring-without-hostname-verification/359752/1 "2024-05-18T18:32:24Z")
I have installed heartbeat-8.13 . Our Elasticsearch cluster is secured with TLS/SSL . I want to monitor our elastic nodes SSL certificate, heartbeat is installed on seperate node . In http.yml file i am mentioning hosts : [https://xx.xx.xx.xx:9200](https://xx.xx.xx.xx:9200) and i haven't mentioned any certificate path. In kibana it is showing DOWN.
When I do curl command i use -k parameter for using elasticsearch http API . How can i monitor the certificate
---
### Author:  [@stephenb](https://discuss.elastic.co/u/stephenb)
#### Post date: [May 18, 2024, 10:51pm UTC](https://discuss.elastic.co/t/tls-certificate-monitoring-without-hostname-verification/359752/2 "2024-05-18T22:51:04Z")
@Aniket_Pant
You can set the `ssl.*` configurations for each http monitor.
Specifically the verification mode
```auto
ssl.verification_mode: none
```
See here
> **[Configure SSL | Heartbeat Reference \[8.13\] | Elastic](https://www.elastic.co/guide/en/beats/heartbeat/current/configuration-ssl.html#client-verification-mode)**