WatchExpiry warnings
Set how many days ahead you want to be warned (e.g. 14) and get an alert while there is still time to renew.
SSL checks
SSL expiry alerts, built into your uptime monitoring
Already watching your sites with WatchControl? Add SSL expiry alerts to the same monitors — so a lapsed certificate can't quietly take down logins, APIs or checkout.
Validity checks
Each check confirms the certificate is currently valid for the host — not just present — so you catch misconfigurations too.
Checked on your schedule
Certificates are re-checked alongside your uptime checks, so a renewal that silently fails is caught quickly.
Alerts where you work
Email and webhook on every plan, plus SMS, routed to the tools your team already uses.
Why it matters
One forgotten renewal is one outage too many
Certificates live on load balancers, reverse proxies, mail servers and internal systems — and ownership is often unclear. A single forgotten renewal can take down customer-facing services and erode trust.
WatchControl gives you one place to see expiry dates across every endpoint you run, with warnings early enough to act. Combine it with HTTP, keyword and port checks for full coverage of each service.
Beyond expiry alerts
Need full certificate management?
WatchControl covers expiry alerts as part of uptime monitoring. If you need to manage certificates — a full inventory, PKI and CT-log discovery, ACME/Let's Encrypt automation and NIS2 compliance reporting — that is CertControl, our certificate-specialist platform from the same team at Certiva.
Many teams run both: WatchControl tells you the moment a certificate or service goes down; CertControl keeps every certificate renewed and audit-ready long before it gets that far.
FAQ
Frequently asked questions
How many days before expiry am I warned?
You choose the warning window per monitor — for example 14 or 30 days ahead — so you get an alert while there is still time to renew.
Does it check that the certificate is actually valid?
Yes. Each check confirms the certificate is currently valid for the host, so you catch expiry and common misconfigurations, not just whether a certificate is present.
Can it monitor SSL on mail and non-web services?
Yes. Certificate checks are not limited to your homepage — mail servers and internal services can be watched too.
Is SSL monitoring on the free plan?
Yes. SSL expiry alerts are part of monitoring on every plan, including the free plan, with alerts by email and webhook.
Never miss a renewal again
Add a certificate target and pick your warning window — free to start.