SSL Certificate Expiration Monitoring
Certly opens a real TLS connection to your site, the same way a browser does.
When auto-renewal runs but the new certificate never reaches the server, you hear about it before your
customers do.
How the monitoring works
Checks what your server actually serves
Not the certificate your CA issued — the one your visitors receive. That gap is where expiry incidents live.
Staged alerts
Warnings arrive 30, 14, 7, and 1 day before expiry, so the first notice lands while there is still time to act calmly.
Domain expiry in the same view
Certificate and domain registration expiry are tracked together. A lapsed domain breaks more than a lapsed certificate.
Suspension detection
Registry status codes and NXDOMAIN responses are checked on every run, so you get the reason instead of a site that has gone dark.
Alerts where you already work
Slack, Discord, email, or your own webhook on Pro and Business. Email on the free plan.
Nothing to install
A hosted service with no agent. Add a domain and Certly starts checking from the outside.
Why this matters more every year
The CA/Browser Forum is shortening how long a TLS certificate may stay valid — from 398 days down to 47 days by 2029. Every certificate will be renewed roughly eight times as often, and every renewal is one more chance for something to fail without anyone noticing.
| Period | Maximum certificate lifetime |
|---|---|
| Until March 2026 | 398 days |
| From March 2026 | 200 days |
| From March 2027 | 100 days |
| From March 2029 | 47 days |
Who it's for
For solo developers
One dashboard for every side project. The free plan covers two sites without a credit card, so a forgotten certificate never becomes a Monday morning emergency.
For agencies and freelancers
Group monitored sites by client and catch a lapsing certificate before the client does. Client grouping and 150 monitored sites come with the Business plan.
For e-commerce and SaaS teams
A browser warning on a checkout page costs sales the moment it appears. Certly watches the certificate your visitors actually receive.
Pricing
Free
Forever. No credit card required.
- 2 monitored sites
- Daily checks
- Email alerts
- 30-day expiry warning
- Domain suspension alerts
- No DNS or DNSSEC monitoring
Pro
Billed monthly. Yearly billing is $120 — $10/mo.
- 25 monitored sites
- Checks every 6 hours
- Email, Slack, Discord, webhook
- Staged alerts at 30 / 14 / 7 / 1 day
- DNS & DNSSEC monitoring
- 90-day history
Business
Billed monthly. Yearly billing is $390 — $32.50/mo.
- Everything in Pro
- 150 monitored sites
- 1-year history
- Client grouping
All prices in USD. Taxes may apply based on your location.
The
Certly pricing page
has the full plan comparison.
FAQ
I already use auto-renewal. Why monitor expiry at all?
Auto-renewal issues a new certificate, but it does not guarantee the new certificate reaches the server. A reload that never ran, a load balancer holding the old file, or a renewal that failed silently all leave an expiring certificate in front of your visitors. Certly opens a real TLS connection and reports what your server actually serves.
When do the alerts arrive?
Pro and Business plans send staged warnings 30, 14, 7, and 1 day before a certificate or domain expires. The free plan sends a single warning at 30 days.
Is it really free?
The free plan monitors 2 sites with daily checks, email alerts, a 30-day expiry warning, and domain suspension alerts. No credit card is required. DNS and DNSSEC monitoring are not included on the free plan.
Does it monitor domain expiry too?
Yes. Certly tracks domain registration expiry alongside certificate expiry, and checks registry status codes and NXDOMAIN responses so a suspended domain comes with a reason.
Do I need to install anything?
No. Certly is a hosted service with nothing to install and no agent to run. Add a domain and it starts checking from the outside, the same way a visitor's browser would.
How often is the certificate checked?
Every 6 hours on the Pro and Business plans, and daily on the free plan.
Related
DNS monitoring
Record changes, DNSSEC signatures, and email spoofing checks. See how DNS monitoring works.
Certly overview
Full feature list, pricing, and FAQ on the main Certly page.