The “not secure” screen
With an expired certificate the browser shows a warning that sends almost everyone away.
SSL Monitor
Your SSL never expires by surprise.
We check every certificate daily and alert you 30, 14, 7 and 1 day before it expires. The chain, protocol and issuer too. Nothing to install on your server.
Why watch the certificate?
Search rankings
Google doesn’t want to send visitors to a site with a broken certificate. A few days like that show.
APIs that stop working
Apps, integrations and webhooks calling your API fail on the day it expires.
What WatcherWolf watches
Expiry date
Alerts 30, 14, 7 and 1 day before, by email and Telegram.
Full chain
We spot incomplete chains or expired intermediates, which break older phones and curl.
Protocol and ciphers
TLS 1.2 and 1.3, weak configurations, explained without jargon.
Issuer and key type
Let's Encrypt, ZeroSSL, DigiCert, Sectigo… RSA or ECDSA, and an alert if the issuer changes.
How the alerts work.
- Daily checkEvery site you monitor includes its certificate at no extra cost.
- Four staggered alerts30, 14, 7 and 1 day before: plenty of time to renew even if the renewal job fails.
- Each host separatelywww and the root domain are different certificates, and we watch them separately.
Works with any issuer
Let's Encrypt and ZeroSSL
Free and automated: you’ll know if automatic renewal stops working.
DigiCert, Sectigo, GoDaddy
Commercial, extended validation or wildcard certificates.
Subdomains and wildcards
A forgotten wildcard takes every subdomain down at once. We warn you first.
Frequently asked questions
How do alerts arrive?
By email, to one or more recipients per monitor, and by Telegram if you connect it.
Does it work on ports other than 443?
Yes, on any TLS port.
Does it detect self-signed certificates?
Yes, they show as invalid.
Is there a domain limit?
As many as the sites in your plan: every site includes its SSL.
Try it on your own sites.
14 days free, with everything in the plan you choose. No card.