Documentation

Getting started

Create a free account at sign up — no card required. Your free trial covers 1 certificate, which is enough to try the whole flow: add a domain, watch it get checked, see what an alert looks like.

Once you're ready to monitor more than one certificate, see Plans & billing below.

Adding a public domain

From your dashboard, type a hostname into the "example.com" field and click Add domain. Just the domain — no https://, no trailing slash.

• We immediately do a real TLS handshake against it, the same way a visitor's browser would, and show you the issuer, validity dates, and days remaining.
• After that, it's checked automatically once a day.
• You can trigger an extra check anytime with the Re-check button on that row.

If a domain uses a non-standard HTTPS port, that's supported too — just make sure it's reachable from the internet, since this is a live connection, not a local scan.

Adding an internal certificate

Some certificates aren't reachable from the public internet at all — an internal CA's root cert, something behind a VPN, an air-gapped service. For those, click + Add internal certificate (paste PEM) instead.

• Paste the full certificate, including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines.
• Give it a clear name — since there's no hostname to identify it by, the name is how you'll recognize it in your list later. Something like "Prod Internal Root CA" or "VPN Gateway Cert" works well.
• We read the certificate's own validity dates directly — no network connection is made, so this works even for certificates with no public DNS record at all.
• Which group should you choose? Same guidance as below — if you're not sure yet, leave it in General. If this cert belongs to a specific client or environment you already track separately, put it in that group instead.

One honest limitation: because there's no live handshake for internal certs, we can only track the certificate's expiry date — not whether it's been revoked or whether the chain is still trusted.

Groups — creating & choosing

Groups let you organize certificates by client, environment, or team — useful once your list grows past a handful of entries.

• Every account starts with one group called General. Anything you add without picking a different group lands here.
• To create a new group, use the group dropdown next to the add-domain field — pick a certificate's group at the same time you add it.
• The dropdown at the top of your domain list also filters what you're looking at — pick a group to see only its certificates, or All to see everything.

Which group should you choose when adding a certificate? A simple rule that works for most people:

• Just starting out, or only have a few certs? Leave everything in General — there's no benefit to extra groups yet.
• Managing certs for multiple clients? One group per client, so each client's status is easy to check at a glance.
• Running multiple environments? Groups like Production and Staging keep the ones that actually matter for uptime separate from the ones that don't.

Filtering your list

The four stat cards at the top of your dashboard — Monitored, Healthy, Expiring soon, Critical / expired — are clickable. Click one to filter your list down to just that status; click it again (or Monitored) to clear the filter. Combine this with the group dropdown to answer questions like "what's critical in my Production group right now?" in two clicks.

Understanding statuses

• Valid — more than 30 days left. Nothing to do.
• Warning — 30 days or fewer left. Time to plan a renewal.
• Critical — 7 days or fewer left. Renew this soon.
• Expired — already past its expiry date. Anything relying on it is likely broken right now.
• Error — we couldn't verify the certificate at all (connection failed, or it's not trusted). Worth checking manually.

Alerts & acknowledging

The moment a certificate enters Warning, Critical, or Expired, you get an email immediately. If it's still unresolved, you'll get another email every 30 minutes — deliberately persistent, so it can't quietly get lost in an inbox.

• Click Acknowledge on that certificate's row to pause the repeats while you deal with it.
• Acknowledging doesn't hide the problem — the pill still shows the real status until it's actually renewed.
• If the status gets worse (Warning → Critical) or changes again after being acknowledged, alerts automatically resume — so acknowledging one problem can never accidentally silence a different, future one.

Plans & billing

• Free Trial — 1 certificate, no card required.
• Starter — $1/month — 20 certificates.
• Pro — $5/month — 100 certificates.
• Unlimited — $10/month — no cap.

Public domains and internal certificates count the same toward your plan's limit. Upgrading is instant from the Upgrade plan link in your dashboard, handled securely through Razorpay.

If a monthly payment fails, monitoring pauses on your account until it's resolved — you'll see this clearly noted on your dashboard, and everything resumes automatically as soon as payment goes through.

Your account

From the Account page in your dashboard sidebar, you can update your display name and change your password at any time. Your email address is also your login, so it can't be changed from there directly — contact support if you need it updated.

FAQ