Terms of Service

Last updated: October 23, 2026

These Terms of Service (“Terms”) govern your access to and use of CertAvert (the “Service”), which is operated by ILIEV CONSULTING LLC (“Operator”, “we”, “us”, or “our”).

“CertAvert” is the product name for software and related services provided by ILIEV CONSULTING LLC and is not a separate legal entity.

ILIEV CONSULTING LLC is a Minnesota limited liability company organized under Minnesota Statutes Chapter 322C.

1. Description of the Service

The Service provides automated monitoring and notification related to SSL/TLS certificates and associated metadata. The Service is informational only and does not constitute security advice, compliance advice, or professional services of any kind.

1A. Email and Chat Notifications

Alerts are sent by email to the email address of your account (your “Account Email”) and, where your tier allows it, to additional alert addresses you add in your profile (each an “Alert Email”), up to the number your tier includes (the Account Email counts toward that number while alerts go to it). A new Alert Email is used only after it has been confirmed through a verification link sent to that address; until then, and if verification is not completed, alerts continue to go only to the addresses already in use. Alerts are sent only to a verified address. You may add only an address you own or are authorized to use, and you are responsible for keeping it working and able to receive our email.

On paid tiers you may also have alerts posted to Slack or Discord channels, up to the number your tier includes. A URL is saved only after a test message sent to it was accepted. You may add only a URL you are authorized to use; you are responsible for who can see the channel it posts to, and for keeping it working. Those services are run by third parties under their own terms, and we are not responsible for their availability. If alerts to a URL keep failing, we may stop using it and tell you by email. Email remains the primary channel for alerts.

We also email a monthly account summary to your Account Email while you have domains in your account. Where your tier allows additional Alert Emails, you can choose in your profile which verified Alert Emails also receive a copy of the summary (none do unless you choose them), and each such copy has its own unsubscribe link. Paid tiers also receive emails before the registration of a domain name you monitor ends (at 30 and 7 days by default, or on a limited number of days of their choosing, and once if it has ended), sent to the same addresses as certificate alerts; the end date is taken from the domain registry and may not reflect a renewal that has not yet taken effect. You can turn the summary off in your profile or with the unsubscribe link in each summary. Emails about your account, billing and security are part of the Service and are not affected.

On paid tiers you can choose these alert days, or turn off the expiry alerts sent before a certificate expires, the certificate problem alerts and the domain name reminders, separately for each domain. New domains start with the default days. The alerts sent when a certificate has expired and when a domain name's registration has ended cannot be turned off. If you turn an alert off, you will not be told about the events it covers, and you accept that risk.

The Free tier receives an expiry alert 30 days before a certificate expires and one when it expires. Paid tiers receive expiry alerts at 30, 14, and 7 days by default and when it expires, and may replace the default days for each domain with a limited number of days of their choosing, as shown in the Service. For a certificate valid for less than 90 days, each alert day is moved closer to the expiry date, to no more than a third of the certificate's validity, so that routine renewals of short-lived certificates do not trigger alerts. Paid tiers also receive an alert when a certificate problem (such as an untrusted certificate or an unreachable host) is found on two checks in a row, one reminder if the problem continues for 7 days, and one alert when it is resolved. The Free tier does not receive problem alerts.

Alerts depend on scheduled checks and are sent on a best-effort basis. Alert timing is approximate, and an alert may be delayed, combined with others, or not sent, for example if a check fails, an alert day falls between checks, or your tier changes. Settings that belong to a higher tier stop applying when your account returns to a tier that does not include them. This Section does not modify Sections 2, 3, or 4.

1B. Certificate Reports

The certificate report (on the Pro plan) lists what the Service observed from the public internet about the domains and ports you added: their certificates, the daily results of its checks, revocation answers from certificate authorities, the TLS versions accepted, certificate changes and the alerts sent. It also lists the owner (and their email address), purpose and group you gave each domain, as you entered them; you are responsible for their accuracy. It does not cover systems the Service cannot reach or that you did not add. The report and its references to standards (such as PCI DSS, ISO/IEC 27001 and SOC 2) are provided to help you collect evidence; they are not an assessment, audit, certification or attestation of compliance with any standard, and whether the report is sufficient evidence is for you and your assessor to decide. Sections 2, 3 and 4 apply to the report.

You can add notes to the report for its readers. They are printed as you wrote them and marked as the account's own notes; you are responsible for them, and the Service does not check them. Each report has an ID. The Service keeps a fingerprint (SHA-256) of each of its files, not the report itself, so that anyone who has a file can check on the Service's verify page whether it is unchanged; for a matching file, that page shows the report ID, the account name, the period, the group, owner or purpose the report covers (if one was chosen) and when the report was generated.

2. No Warranty

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”.

ILIEV CONSULTING LLC MAKES NO WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF ACCURACY, AVAILABILITY, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

ILIEV CONSULTING LLC DOES NOT WARRANT THAT ANY CERTIFICATE ISSUE WILL BE DETECTED, REPORTED, OR NOTIFIED, OR THAT THE SERVICE WILL BE ERROR-FREE, COMPLETE, OR UNINTERRUPTED.

2A. Explanations and Other Content

The explanations and other written content on our website are drafted with the help of artificial intelligence tools. They are general information, not professional, legal, security or compliance advice. Technical details change and errors can occur, and the content is provided “as is” without any warranty of accuracy or completeness. Check important changes, especially to DNS records, server settings and certificates, against the documentation of your provider and your own circumstances before you rely on them. If you find a mistake, please tell us at the address in Section 14. Sections 2, 3 and 4 apply to this content.

2B. Ratings and Comments

We may ask you to rate the Service. Rating is optional. Your rating counts toward the average rating shown on our website. If you allow it when you send it, you give us permission, free of charge, to show your comment and the name you gave with it on our website and in information about the Service that search engines read. We show a comment as you wrote it or not at all, and we decide which comments to show. Please write only your own honest opinion and nothing confidential. You can ask us at any time, at the address in Section 14, to stop showing your comment or to delete your rating.

3. No Reliance

YOU AGREE NOT TO RELY ON THE SERVICE AS A SOLE OR PRIMARY SECURITY, COMPLIANCE, OR OPERATIONAL CONTROL. USE OF THE SERVICE IS AT YOUR OWN RISK.

4. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, ILIEV CONSULTING LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING LOSS OF DATA, PROFITS, REVENUE, BUSINESS INTERRUPTION, SECURITY INCIDENTS, OR MISSED NOTIFICATIONS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN ALL CASES, TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT PAID BY YOU TO ILIEV CONSULTING LLC (INCLUDING SUBSCRIPTION FEES) IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR ZERO (0) IF NO FEES WERE PAID.

5. Plans and Subscriptions

The Service is offered in tiers: a free tier (“Free”) and paid tiers (“Starter”, “Plus” and “Pro”) that allow more monitored domains and may include the notification options described in Section 1A. Free requires no payment. Paid tiers are available as a yearly subscription (“Subscription”). Current prices, domain limits, and features are shown in the Service. Prices are in U.S. dollars.

Our reseller, Paddle. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries related to payments and handles returns. Your purchase is also subject to the Paddle Buyer Terms.

Automatic renewal. When you subscribe, you authorize Paddle to charge your payment method the yearly price of your tier, which includes any applicable tax, when you subscribe and again at the start of each following yearly period. YOUR SUBSCRIPTION RENEWS AUTOMATICALLY EVERY YEAR UNTIL YOU CANCEL IT. You confirm this when you subscribe, and your renewal date and price are shown on the Plans page.

Cancelling. You may cancel at any time on the Plans page. Cancellation takes effect at the end of the current paid year: your tier stays active until then, you are not charged again, and your account then returns to Free. You may resume a cancelled Subscription before the paid year ends.

Changing tiers. An upgrade takes effect immediately, and you are charged the prorated difference for the rest of the current paid year; your renewal date does not change. A downgrade takes effect at your next renewal date, when you are charged the price of the lower tier. You may cancel a scheduled downgrade before it takes effect. If you choose a lower tier while on a tier with no end date, the change takes effect right away.

Refunds. You may request a full refund of any payment, including a yearly renewal, within fourteen (14) days of that payment, as described in our Refund Policy. When a payment is refunded, the tier it paid for ends. After fourteen (14) days, payments are non-refundable, except where required by law or as stated in Section 10, and there are no refunds or credits for partial years, unused time, unused domains, downgrades, or cancellation. Deleting your account stops your Subscription from renewing, so you are not charged again; if you restore your account within thirty (30) days, the Subscription continues and renews as before, and otherwise it ends when the account is permanently deleted. A refund is given only within the fourteen-day period.

Failed payments. You are responsible for keeping a valid payment method on file with Paddle. If a renewal payment fails, Paddle may retry it for a limited time, and your tier stays active during that time. If the payment cannot be collected, your Subscription ends and your account returns to Free. If a payment is refunded, reversed, or charged back, we may end your Subscription and return your account to Free.

Taxes. Paddle calculates, collects, and pays sales tax, VAT, or GST where it applies. Prices shown in the Service include any applicable tax; the total is shown at checkout before you pay.

Payment processing. Payments are processed by Paddle under its own terms and privacy policy. Card and other payment details are entered directly with Paddle; ILIEV CONSULTING LLC does not receive or store full card numbers or security codes. Charges appear on your statement under Paddle’s name (for example “PADDLE.NET* CERTAVERT”).

Other plans. A tier we grant without payment has no end date unless we tell you otherwise, and we may change or end it. A tier previously granted in recognition of a tip stays active until the end date shown in the Service, is not renewed, and then returns to Free unless you subscribe; subscribing replaces it right away, without credit for its remaining time.

Promotional offers. We may offer a paid tier free of charge for a limited time through a promotional sign-up link, for a limited number of people. An offer is for new accounts only, one per person, and a place is given only when you confirm your email address, in the order confirmations reach us; when the places are gone or the offer ends, accounts are created on Free. The tier lasts for the time stated in the offer, is not renewed, and then returns to Free unless you subscribe; no payment method is needed and you are not charged. Subscribing replaces it right away, without credit for its remaining time. An offer has no cash value and cannot be transferred. We may end an offer, or a tier obtained through it, if it is misused (for example with several accounts or false information).

Pro trial. Each account can try the Pro tier free once, for 30 days, without payment details, unless it has already had Pro free of charge (through a promotional offer, from us, or an earlier trial). At the end it returns to the tier it had (Free, or the tier you pay for); domains over that tier's limit are paused, not deleted, and daily records the trial kept beyond that tier's period are deleted. Subscribing to Pro replaces the trial right away, without credit for its remaining time. We may change or end the trial offer at any time; a trial already started runs to its end, unless it is misused.

Changes to prices and tiers. We may change prices, tiers, domain limits, or features. A price change applies to your Subscription only from your next renewal, and we will email you at least thirty (30) days before that renewal, so you can cancel beforehand. If your domain limit is reduced, domains above the limit may be paused (not deleted).

A Subscription is not a service-level commitment or a guarantee of any feature, availability, or result, and it does not modify Sections 2, 3, or 4.

6. Third-Party Services

The Service depends on third parties, including Paddle and other payment providers, email delivery providers, hosting and network providers, DNS, certificate authorities, and the servers of the domains you monitor. ILIEV CONSULTING LLC is not responsible for, and shall have no liability for, any failure, delay, outage, error, data loss, or change in any third-party service, including delayed payment notifications, a delay in applying a tier change, or failed or delayed email notifications. Such failures do not entitle you to a refund or other remedy.

7. User Responsibilities

You are solely responsible for ensuring you have authorization to monitor any domain you submit and for maintaining the confidentiality of your account credentials.

The free tools on our website (certificate expiry and trust, certificate names and SANs, certificate chain, TLS versions and ciphers, DNS and domain registration, the certificate and CSR decoder, and compromised eMudhra CAs) are for occasional one-off lookups. Their results are informational, may be up to about a minute old (a check of the same domain in that time shows the saved result), and are covered by Sections 2, 3, and 4. You may check only domains and ports you are authorized to test, and you agree not to use the Service or the free check to scan, probe, or overload hosts or ports, to send automated or bulk requests, or to bypass rate limits, the captcha, or other protections.

certavert-scan, our open-source scanner, runs on your own computer under its MIT license, as is, and sends nothing to CertAvert. Scan only networks you own or are authorized to scan.

The same applies to the features that look up public information about a domain, such as its registration date and other names that have certificates under it (taken from public certificate logs and registry services): use them only for domains you are authorized to monitor, and not to gather names in bulk.

7A. Two-Factor Authentication

You may enable optional two-factor authentication to add a second step when you sign in, using an authenticator app. If you enable it, you are responsible for keeping access to your authenticator app and for saving the one-time recovery codes we show you when you turn it on.

For the security of your account, we do not disable or reset two-factor authentication on request. Your recovery codes are the only way to sign in if you lose your authenticator app. If you lose access to both your authenticator app and your recovery codes, we cannot verify you safely, we cannot restore access, and your account cannot be recovered.

If you have a paid Subscription and become locked out in this way, the Subscription continues to renew automatically until it is cancelled (see Section 5). Email us from your Account Email and we will cancel it so it does not renew again; charges already made are non-refundable except as stated in Section 5.

8. Indemnification

To the maximum extent permitted by law, you agree to defend, indemnify, and hold harmless ILIEV CONSULTING LLC and its members, managers, employees, and agents from and against any claims, damages, liabilities, losses, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to: (a) your use of the Service; (b) any domain you submit, including any lack of authorization to monitor it; (c) your violation of these Terms or of any law or third-party right; or (d) any reliance by you or others on the Service.

9. Data Deletion and Retention

If you delete a monitored domain, monitoring stops immediately. If you delete your account, access to the Service is disabled immediately and monitoring stops. In either case, certain data may be retained for a limited period for security, audit, troubleshooting, abuse-prevention, and legal purposes, and then permanently deleted. A deleted account can be restored during the first thirty (30) days by logging in or signing up again with the same email address.

Details about retention periods and deletion behavior are described in the Privacy Policy.

10. Suspension and Termination

ILIEV CONSULTING LLC may limit, suspend, or terminate access to the Service at any time, with or without notice, for any reason or no reason, including suspected abuse, violations of these Terms, or activity that creates operational, security, or legal risk.

If we end your access for a reason other than your breach of these Terms, or stop offering your paid tier, we will refund the unused part of your current paid year. Otherwise, suspension or termination does not entitle you to a refund.

11. Arbitration

PLEASE READ THIS SECTION CAREFULLY. IT AFFECTS YOUR LEGAL RIGHTS.

Any dispute, claim, or controversy arising out of or relating to these Terms or the Service shall be resolved exclusively by binding arbitration conducted in the State of Minnesota, United States, unless prohibited by applicable law.

YOU WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION OR REPRESENTATIVE PROCEEDING.

12. Governing Law

These Terms are governed by and construed in accordance with the laws of the State of Minnesota, United States, without regard to conflict-of-law principles.

13. Changes

These Terms may be modified at any time. Continued use of the Service constitutes acceptance of the modified Terms. We will email subscribers about material changes to paid tiers, such as price changes (see Section 5).

14. Contact

ILIEV CONSULTING LLC, Minnesota, United States. Email support@certavert.com, or use the Support section of the Service if you have an account.