Dear Zabbix Team,

I hope, you do well.
Well, we have been trying to setup the "Website certificate by Zabbix agent 2" project to use in our system, but unfortunately we have not been able to succeed.
Though, we have done everything written in (https://www.zabbix.com/integrations/ssl#certificate_agent2) through the understanding by our vision.     
We have always got the message of "ZBX_NOTSUPPORTED: Cannot fetch data: dial tcp <IP ADDRESS>:443: i/o timeout."
How can we solve this issue ?
Is this a version issue or not, well we certainly we have lost our way. 
Attached files shows our DANCE with the SETUP.
We need your immediate support.

Regards.
Nuri.

Hello,

The error itself usually means a network issues of some kind. Please check if the website is reachable via network from the server itself?
Something like i.e.:

curl https://your-domain

Best Regards,
Aleksandrs

Hello  agavrilovs

Thanks for the feedback.
The website, whose SSL certificate we have aimed to check is reachable by ZABBIX Server.
Below is the output of the CURL command, there is no network barrier between the Domain server and ZABBIX server.   

Regards.

Nuri.

Dear   agavrilovs,

Below is the normal ZABBIX status line of the HOST (SSL Certificate Expiry Check by Agent2).
The ZABBIX Agent2 is reachable by Zabbix Server via port 10050 and also Windows Server with IIS is reachable via ports 443, 80 by ZABBIX Server. .
   
Best Regards.
Nuri.

I apologize, that was a bit incorrectly asked from my side, and from the device on which the agent is installed itself? 
And additionally, please execute this command on the agent host:

zabbix_agent2 -t web.certificate.get[<website_DNS_name>]

And as a test:

zabbix_agent2 -t web.certificate.get[https://google.com] 

Best Regards,
Aleksandrs

Dear  Aleksandrs,

Your approach has given me a Brain Wave ....
I have updated the host file adding the record  "127.0.0.1 www.domainname.com " because the firewall routing all DNS queries has not had a feature of 
"LOOPBACK NAT POLICY" (routing back public addresses coming from local ip servers back to local lan) at the moment and 
unclick the IIS "Require Server Name Indication"  BOX (ıf you click this Agent2 throws out the error of  "[ZBX_NOTSUPPORTED]". 
My problem has been halfly solved by your valuable support, because the below condition ...

ZABBIX ITEM still shows UNSUPPORTTED ....

but, the below condition has been still continuing ...

Please, if you find this solution as a  precious data, I will be glad if "THE ZABBIX TEAM" will add this approach to the manual page where it is needed.  

Best Regards,
Nuri.

Hello Dear  Aleksandrs,

We also receives the below TEST STEP message ...

but the ZABBIX GET command works in the same ZABBIX SERVER and gets the normal SSL certificate data succesfully ...

Best Regards .
Nuri.

As you can see the agent itself is capable of retrieving the data, the issue here is in one case in the timeout itself and in other in the connection between sever and agent. But all of them suggest a configuration issue, so this cannot be accounted as a bug report.
Please be advised that this section of the tracker is for bug reports only. The case you have submitted can not be qualified as one, so please reach out to [email protected] for commercial support (https://zabbix.com/support) or consultancy services. Alternatively, you can also use our IRC channel or community forum (https://www.zabbix.com/forum) for assistance. With that said, we are closing this ticket. Thank you for understanding. 

Very Best Regards,
Aleksandrs

Hello,

Wish you a Healhty Life for the All Zabbix Team. 
Thanks for the support.

Very Best Regards,
Nuri.