Certificate monitoring with automatic host discovery and issuance alerts

CertObserver can automatically discover hosts under your domains using Certificate Transparency logs, monitor the certificates they use, and warn you before they expire. It can also alert you when new certificates are issued for those domains.

How Certificate Transparency powers CertObserver CertObserver extracts hostnames from certificates in Certificate Transparency logs, then connects to those hosts to check their certificates in use. These checks can produce expiration warnings. Hosts added manually join the same checking path. The separate issuance path checks logged certificates against configured alert conditions before sending issuance alerts. CertificateTransparency logs Automatic hostdiscovery Live certificatechecks Issuance alerts Alert conditions Manual host entry Expiration warnings Hostname Add

All publicly trusted SSL/TLS server certificates are logged to public Certificate Transparency (CT) logs. Use our free CT log search to explore the certificates logged for your domains without signing up.

Monitoring certificates in use

CertObserver can monitor the certificates your hosts actually use. It periodically connects to monitored hosts to check their certificates and can alert you before expiration and about other issues such as hostname mismatches and incomplete certificate chains.

As new hosts are discovered from new certificates in CT logs, they’re automatically added to the monitoring. This can cover hosts set up by another team or a service provider that you might have otherwise missed. You can also add hosts manually and exclude hosts you don’t want monitored.

Read more on the SSL/TLS certificate monitoring page

Monitoring certificate issuance

CertObserver monitors CT logs and can alert you when a new certificate is issued for your domain or its subdomains. You can receive alerts for every new certificate or only those matching your selected alert conditions.

These alerts can help you notice certificates issued without your knowledge.

Read more on the Certificate Transparency monitoring page

Alerts

Alerts can be sent via email, Slack, or both. You can choose where they’re sent based on alert type and severity.

Shared access

You can invite your team to access the same monitors and choose a role for each member.