Free
$0
- 1 domain
- Every subdomain discovered automatically
- Audit-ready inventory export
- 3 live renewal checks
CertLantern is certificate visibility for teams without a PKI team. It checks that auto-renewal actually worked, raises unexpected-CA and CAA alerts, includes every subdomain discovered automatically, and keeps an audit-ready inventory export. The app stays at certs.playedu.games.
How it works
Add a domain
Sign in with a one-time email link, create an organization, and name a domain. Every subdomain discovered automatically is added to the inventory.
Confirm renewal
CertLantern checks that auto-renewal actually worked: a new certificate in the logs is not the same as the certificate a host is serving.
Export the record
Download an audit-ready inventory export when you need issuer, names, and expiry in one file.
What you can see
Certificate visibility for teams without a PKI team.
Renewal checks
A live check compares the certificate a host is serving with the one that was issued, so you can see that auto-renewal actually worked.
Unexpected-CA and CAA alerts
An unexpected-CA alert fires when a certificate comes from an issuer you did not expect. CAA alerts fire when the CAA record changes.
Subdomains
Every subdomain discovered automatically shows up, including names you did not type in by hand.
Audit-ready export
An audit-ready inventory export lists what was issued, what is serving, and when it expires.
Alerts
Email alerts are on Pro and Team. Webhook alerts are on Team. Unexpected-CA and CAA alerts are part of that same signal: an issuer you did not expect, or a CAA change.
Try it without an account
Certificate checker
The free public certificate checker looks up expiry from public certificate logs. One page of results, no account, and no connection to the domain.
Early pricing
Early pricing; billing isn't live yet. Nothing is billed. These limits are the introductory plans, and they are not enforced yet.
Pro
$9/mo or $90/yr
- 10 domains
- 25 endpoints
- Daily renewal checks
- Email alerts
Team
$29/mo or $290/yr
- 50 domains
- 150 endpoints
- Daily renewal checks
- 5 users
- Webhook alerts
Larger organizations can ask about pricing at hello@playedu.games. The same plans are listed at certs.playedu.games/pricing.
A few answers
- A listed certificate was issued. It was not necessarily installed. Transparency logs record issuance, not deployment. A name can show up because someone requested a certificate, even if you never installed it.
- Only your organization can see its inventory. Anyone can look up one public domain on the certificate checker. The organization inventory itself stays behind sign-in.
Certificate visibility for teams without a PKI team.
Create an account or try the checker. Nothing on the early plans is billed yet.