GUIDE · TLS CERTIFICATES
SSL certificate expiry monitoring.
Automatic renewal usually works, until a DNS change, a moved site or a forgotten subdomain stops it. Domain Watch reads the certificate each of your domains serves, once a day, and tells you before it lapses.
What is checked
Each daily check records the certificate's expiry date and issuing organisation for the domain. Because the check looks at what the domain actually serves, a renewal that silently failed shows up as an approaching date rather than staying hidden behind an automation you assume is working.
When you are alerted
- 30, 14, 7 and 1 days before the certificate expiry date.
- Thresholds follow the calendar, so you are reminded again as the date gets closer even when nothing else changed.
- New hostnames found in public certificate records are reported too, which helps you spot subdomains you were not tracking.
Across a portfolio
One dashboard and one alert address cover up to 100 domains on Starter or 500 on Agency, alongside registration expiry and email DNS changes for the same domains.
What it does not do
Domain Watch does not install, renew or reissue certificates, and it does not scan every server behind a domain. It observes the certificate served for the domain you add, on a daily schedule.