CertAvert

See inside CertAvert

Real screens from a demo account. What you see after adding a domain, one screen at a time.

The Domains page: five domains with their status, expiry date, issuer, last check and domain registration date
The Expiry alerts tab of expired.badssl.com: 30, 14 and 7 days not sent, the expired email sent
The Certificate chain tab of incomplete-chain.badssl.com: the chain is incomplete, with an explanation and an Acknowledged switch
The SANs tab of kernel.org: eight names, four pointing to different addresses and flagged, each with an Acknowledged switch, a note and Add to monitor
The Other names tab of kernel.org: 44 names found under kernel.org, with Monitor all and Acknowledge all
The DNS tab of expired.badssl.com: its address, its nameservers at Google Cloud DNS, DNSSEC off and no CAA records
The Domains page of a new account: Add your first domain, what happens next, and a reminder to send a test email
1 of 7

Every domain at a glance

Each domain shows its status (OK, expiring, warning or error), when the certificate expires, who issued it, when it was last checked and when the domain name itself must be renewed.

2 of 7

Emails before it expires

Open a domain to see its expiry emails and which ones went out. Every plan gets the 30-day email and the one when it expires; Starter and Pro add 14 and 7 days, or up to three days of your choice, and can send to several addresses.

3 of 7

A broken chain, explained

A server has to send the intermediate certificates along with its own. When one is missing, in the wrong order or expired, you see what is wrong, the order to send and how to fix it. Expected? Acknowledge it and the warning goes.

4 of 7

Every name on the certificate

One certificate often covers www, api, shop and more. We check where each name points. When one is served from somewhere else, renewing the certificate here does not renew it there, so it is flagged. Acknowledge it (a CDN, a load balancer) or add it to monitor.

5 of 7

Names you forgot you had

The public certificate logs show every name that has had a certificate under your domain. Old test sites, a forgotten shop: monitor them in one click, or acknowledge the ones you don't need.

6 of 7

DNS and the domain name

How the domain resolves and which address the certificate was read from, who hosts its DNS, whether DNSSEC is on, which authorities may issue its certificates (CAA), and when the domain name is due for renewal.

7 of 7

Up and running in a minute

Type a domain and press Add. It is checked at once, the details follow a moment later, and then it is checked twice a day. Send yourself a test email first, so the alerts land in your inbox and not in spam.

* Demo account with example sites, not customers.