An expired certificate is immediately visible to users. The alert should arrive in advance, not after the outage.
Monitor expiry date, hostname match, certificate chain, HTTPS response, IIS binding and the last renewal task result.
DataHouse and eTop can connect hosting, Windows Server and monitoring into a process that reduces outage risk.
For everyday hosting, start with Hostilla. For dedicated infrastructure, servers or colocation, continue with DataHouse.