SSL certificate monitoring
that warns you weeks ahead.
Every check reads the certificate of each site: whether it verifies, the host name, the issuer and the expiry date. You hear 14, 7, 3 and 1 day before it ends, and the notice closes by itself once it is renewed.
- On every plan
- Read on every check
- Nothing to install
How it works
Three steps, and the first one is the only one you do.
Add your site
Every site starts with three checks: the page, the certificate and DNS. There is no agent, plugin or code to install, so it works on any stack.
Every check reads the certificate
Verification, the host name it is valid for, who issued it and when it ends, from more than one region. A replacement goes on the site’s timeline of what changed.
You hear before it ends
An alert at 14, 7, 3 and 1 day before expiry, each one once, seen twice five minutes apart before it is sent. When the new certificate arrives, the notice closes.
What you get
Four warnings, never a flood
14, 7, 3 and 1 day before expiry: each threshold is sent once per certificate, to the channels you chose.
Broken certificates, caught at once
A certificate that does not verify or names another host fails the check, and becomes an incident when two regions agree.
Renewals on the timeline
A new certificate is recorded on the site’s timeline of what changed, so an outage right after a renewal shows the change beside it.
Days left in the monthly report
From Solo, the monthly report shows the certificate’s days left beside uptime and incidents, from stored checks.
Which plans include it
On every plan, Free included. The plan decides how many sites you watch.
- FreeIncluded
- SoloIncluded
- TeamIncluded
- AgencyIncluded
- Agency PlusIncluded
Questions about certificate monitoring
When do the certificate alerts arrive?
At 14, 7, 3 and 1 day before the certificate ends. Each threshold is sent once for a certificate, after it was seen twice at least five minutes apart, to the alert channels you set up.
What happens when the certificate is renewed?
The next checks read the new certificate. Once the new one is seen twice and has more than 14 days left, the expiry notice closes by itself, and the change is on the site’s timeline.
Does it work with Let’s Encrypt and other free certificates?
Yes. The check reads the certificate the site presents, whoever issued it, so short-lived free certificates are watched like any other.
Do I need to install anything?
No. Beamfar connects to the site from outside, like a visitor’s browser does, so it works with any host and any stack.
Can I check one certificate without an account?
Yes: the free SSL certificate checker reads one address now, without an account, and stores nothing about it.
Related guides
- SSL certificate expiry on client sitesWhy certificates still expire, what shorter lifetimes change and a routine that catches expiry early.
- What a 200 OK response hidesWhy a 200 status can hide soft 404s, error pages, broken checkouts and stale caches, and how to check content too.
- Website down: a first-15-minutes triage checklistA step-by-step triage for a site-down alert: confirm it, find the broken layer and decide what to tell the client.
Hear about expiring certificates weeks ahead.
Add your sites: both regions start reading their certificates as soon as you do.
No card for the Free plan.