Certly
SSL, domain, DNS, and DNSSEC monitoring for every site you run.
Staged alerts reach Slack, Discord, or email weeks before anything lapses.
Features
Checks what your server actually serves
Certly opens a real TLS connection to your site, the same way a browser does. When auto-renewal runs but the new certificate never reaches the server, you hear about it before your customers do.
Staged expiry alerts
Warnings arrive 30, 14, 7, and 1 day before a certificate or domain expires — on Slack, Discord, email, or your own webhook.
Every DNS change on a timeline
Changes to your A, MX, NS, and TXT records are recorded newest-first, with the risky ones flagged, so a misconfiguration or a hijacked record never goes unnoticed.
DNSSEC signature monitoring
DNSSEC fails quietly and takes the whole domain down with it. Certly tracks RRSIG expiry, ignores healthy key rotation, and alerts you when signatures stall or fail validation.
Domain suspension detection
Registry status codes and NXDOMAIN responses are checked on every run, so when a domain is suspended you get the reason, not just a site that has gone dark.
Email spoofing checks
Certly inspects your DMARC and SPF records, so you find out if someone else can send mail in your name.
Use Cases
For solo developers
One dashboard for every side project. The free plan covers two sites without a credit card, so a forgotten certificate never becomes a Monday morning emergency.
For agencies and freelancers
Group monitored sites by client and catch a lapsing certificate or domain before the client does. Client grouping and 150 monitored sites come with the Business plan.
For e-commerce and SaaS teams
A browser warning on a checkout page costs sales the moment it appears. Certly watches the certificate your visitors actually receive, along with the DNS records that route them to you.
Why now
The CA/Browser Forum is shortening how long a TLS certificate may stay valid — from 398 days down to 47 days by 2029. Every site will renew roughly eight times as often, and every renewal is one more chance for something to fail without anyone noticing.
| Period | Maximum certificate lifetime |
|---|---|
| Until March 2026 | 398 days |
| From March 2026 | 200 days |
| From March 2027 | 100 days |
| From March 2029 | 47 days |
Pricing
Free
Forever. No credit card required.
- 2 monitored sites
- Daily checks
- Email alerts
- 30-day expiry warning
- Domain suspension alerts
- No DNS or DNSSEC monitoring
Pro
Billed monthly. Yearly billing is $120 — $10/mo.
- 25 monitored sites
- Checks every 6 hours
- Email, Slack, Discord, webhook
- Staged alerts at 30 / 14 / 7 / 1 day
- DNS & DNSSEC monitoring
- 90-day history
Business
Billed monthly. Yearly billing is $390 — $32.50/mo.
- Everything in Pro
- 150 monitored sites
- 1-year history
- Client grouping
All prices in USD. Taxes may apply based on your location.
The
Certly pricing page
has the full plan comparison.
FAQ
What does Certly monitor?
For every domain you add, Certly tracks SSL/TLS certificate expiry, domain registration expiry, registry suspension status, DNS record changes, DNSSEC signature validity, and your DMARC and SPF records.
Do I need to install anything?
No. Certly is a hosted service with nothing to install and no agent to run. Add a domain and it starts checking from the outside, the same way a visitor's browser would.
How is Certly different from an uptime monitor?
An uptime monitor tells you your site is already down. Certly warns you weeks earlier, while the certificate or domain is still valid and there is still time to renew it.
Where do alerts go?
Email on every plan. Paid plans add Slack, Discord, and custom webhooks, and let you mute DNS alerts or limit them to critical changes only.
Can I try Certly without signing up?
Yes. The free domain check returns SSL, domain, and email spoofing results instantly, with no account required.
When does Certly warn me about an expiring certificate?
Paid plans send staged alerts 30, 14, 7, and 1 day before expiry. The free plan sends a single warning 30 days out. Either way you get the notice while there is still time to renew.
Is there a free plan?
Yes. The free plan covers two monitored sites with daily checks, email alerts, and domain suspension detection. No credit card is required.