Developer Tools

๐Ÿ“œ Certwatch

SSL certificate and domain expiry monitoring you own forever.

Quick facts

Certwatch at a glance

Price$24, once โ€” no renewal
ReplacesSSLMate-style SSL monitors at $10โ€“20/mo โ€” roughly $180 a year, every year
TypeSelf-hosted web app
PlatformsYour own server (VPS / Docker), any browser
CategoryDeveloper Tools
What's in the box

Certwatch features

01

๐Ÿšฆ Traffic-light dashboard

Green over 30 days, yellow at 30 or under, red under 7 days, or for expired, invalid or unreachable hosts.

02

๐Ÿค Real TLS handshake checks

Node tls checks expiry, issuer, SAN list, chain validity, self-signed certs and weak keys (RSA under 2048, EC under 224).

03

๐ŸŒ Domain WHOIS expiry

Best-effort registry lookups so the domain registration itself does not lapse either.

04

๐Ÿ”” Threshold alerts

Configurable days (default 30, 14, 7, 1) via webhook and SMTP email, with exactly one alert per threshold per certificate.

05

โ›“๏ธ Chain viewer

See the full presented certificate chain per check in the UI.

06

๐Ÿ“œ Check history

Every check is stored, and unreachable hosts are recorded with the error.

Pricing

$24 once โ€” that's the whole pricing page

SSLMate-style SSL monitors charges $10โ€“20/mo โ€” roughly $180 a year, every year. Certwatch is a single payment, and it keeps working whether or not we ever sell another copy.

$10โ€“20/mo forever $24once

Or get Certwatch inside the full suite โ€” every app in the catalog, currently $97 for the bundle. See the bundle →

FAQ

Honest answers

Is it really free on GitHub?

Yes. Certwatch is MIT-licensed at github.com/bensblueprints/ssl-cert-monitor-mvp and always will be. The $24 buys the packaged 1-click installer; building from source is free.

Where does my monitoring data live?

In a SQLite database on your own server. The checker connects directly to your hosts, so run it from a box that can reach them, and nothing goes to any third-party API.

How reliable is the domain-expiry check?

Certificate checks are the reliable signal. WHOIS domain expiry is best-effort: some TLDs publish no expiry and some rate-limit, so treat it as a bonus rather than the primary alarm.