CERT

CERT checks TLS certificates, domain registration dates and DNS records, and shows what is expiring, invalid, changed or unknown before it becomes an outage. An Expiry Radar for every deadline, incidents worst first, and local history.

VERIFIED, NEVER RELAXED — A normal TLS handshake with verification on. Expired, wrong-host and untrusted certificates are named by their error, and dates are never invented.

REGISTRATIONS FROM THE REGISTRY — Domain expiry comes from RDAP, the registries' own data. Unknown stays unknown.

CHANGES NOTICED — A new certificate fingerprint or a changed DNS record against its baseline is recorded and shown.

CERT CORE: Overall health, counts and the nearest deadline.

CERTIFICATE WATCH: One verified certificate: expiry, chain and hostname.

DOMAIN WATCH: One domain registration expiry from RDAP.

DNS WATCH: Records, expectations and changes against a baseline.

EXPIRY WATCH: The Expiry Radar: every deadline, nearest first.

INCIDENT WATCH: Open problems, worst first.

CHECK NOW: An immediate check of everything or one target.

GROUP WATCH: A client, project or environment group.

Part of the OPS family: seven operations consoles with one design. On a Stream Deck Neo, its Infobar shows what is happening, or the verdict. No permission needed. Reads public TLS, DNS and RDAP data; never changes your infrastructure. macOS 12+, Stream Deck 7.6+. Local only: no account, cloud service, telemetry or subscription.

CERT 1.0.0

First release: CERT Core, Certificate, Domain, DNS, Expiry, Incident, Check Now and Group Watch, and an Infobar for the Stream Deck Neo, on the OPS design.

No permission needed. Reads public TLS, DNS and RDAP data; never changes your infrastructure.