Free
$0
- 1 domain
- Full Certificate Transparency inventory
- 3 live endpoint checks
Certwatch keeps an inventory of certificates published for your domains: issuer, names, key, signature, and expiry. It is a hosted product for teams anywhere, built only from public Certificate Transparency logs. The app is at certs.playedu.games.
How it works
Add a domain
Sign in with a one-time email link, create an organization, and name the domains you care about.
Read public logs
A scheduler queues Certificate Transparency refreshes. Each run stores one page of what the logs return.
Watch expiry
Expired and expiring certificates are highlighted. Export the inventory as CSV whenever you need it.
What the inventory holds
Built only from public Certificate Transparency logs.
Identity
Subject names, issuer, serial, and SHA-256 fingerprint when the log provides the certificate.
Cryptography
Key type and size, plus the signature algorithm, when the certificate bytes are available.
Live endpoint checks
Add an endpoint under a domain and Certwatch probes the certificate that host is serving. That comparison can show a renewal that was logged but is not deployed.
Access
Owner, admin, and viewer roles, with an audit log of who changed the organization.
Alerts
Email alerts are on Pro and Team. Slack, Teams, Discord, and webhooks are on Team.
Try it without an account
Certificate checker
The free public certificate checker looks up expiry from public Certificate Transparency logs. One page of results, no account, and no connection to the domain.
Public demo
The mozilla.org demo is a read-only showcase built only from public Certificate Transparency logs. It is never probed. Certwatch is not affiliated with Mozilla and holds no private data from Mozilla.
Early pricing
Early pricing; billing isn't live yet. Nothing is billed. These limits are the introductory plans, and they are not enforced yet.
Pro
$9/mo or $90/yr
- 10 domains
- 25 endpoints
- Daily live checks
- Email alerts
Team
$29/mo or $290/yr
- 50 domains
- 150 endpoints
- Daily live checks
- 5 users
- Slack, Teams, Discord, and webhooks
Larger organizations can ask about pricing at [email protected]. The same plans are listed at certs.playedu.games/pricing.
A few answers
- A listed certificate was issued. It was not necessarily installed. Transparency logs record issuance, not deployment. A name can show up because someone requested a certificate, even if you never installed it.
- Only your organization can see its inventory. The public demo is the only organization inventory available without signing in. Anyone can look up one public domain on the certificate checker.
See certificates before they expire.
Create an account, try the checker, or open the public demo. Nothing on the early plans is billed yet.