Documentation
How to monitor SSL/TLS certificates with CertWatchr: expiry alerts on any port, health scoring, Certificate Transparency, webhooks and the REST API.
CertWatchr warns you before a certificate expires or breaks. New here? Start with Getting started — your first domain is monitored in two minutes.
What CertWatchr does
- Watches your certificates. It reads the certificate each hostname serves, on any port, and warns you before it expires.
- Spots a renewal that has stopped. It tells you when automatic renewal is overdue, when DNS CAA records would block your CA, when the domain registration itself is about to lapse, and when servers behind one hostname serve different certificates.
- Scores each certificate from 0 to 100, so a certificate that is valid but badly set up stands out too.
- Watches Certificate Transparency logs and tells you when someone issues a new certificate for your hostname.
- Notifies you by e-mail or webhook (Slack, Microsoft Teams, Discord, Mattermost, Telegram or your own endpoint) — once, not every few hours.
Find your topic
| I want to … | Read |
|---|---|
| Set up my account and first domain | Getting started |
| See everything CertWatchr can do | Features |
| Add a mail server, use tags, import a CSV | Adding domains |
| Keep many customers and projects apart | Customers and projects |
| Share one account with my colleagues | Teams |
| Understand an alert, or get fewer of them | Alerts & notifications |
| See everything that needs attention in one place | Notification centre |
| Raise a low health score | Health score |
| Catch certificates I did not issue | CT log monitoring |
| Send alerts to Slack or my own system | Webhooks |
| Automate with scripts or CI | API |
| Compare plans, upgrade or cancel | Plans & limits |
| Protect my account | Two-factor authentication, Social login |
| Find a quick answer | FAQ |
Still stuck?
Write to us — you do not need to be signed in.