Add a domain
Sign in with a one-time email link, create an organization, and name the domains you care about.
Certificate Transparency for any domain you run
See certificates before they expire.
Certwatch keeps an inventory of certificates published for your domains: issuer, names, key, signature, and expiry. It is a hosted product for teams anywhere, built only from public Certificate Transparency logs.
Read public logs
A scheduler queues Certificate Transparency refreshes. Each run stores one page of what the logs return.
Watch expiry
Expired and expiring certificates are highlighted. Export the inventory as CSV whenever you need it.
What you can see
Identity
Subject names, issuer, serial, and SHA-256 fingerprint when the log provides the certificate.
Cryptography
Key type and size, plus the signature algorithm, when the certificate bytes are available.
Access
Owner, admin, and viewer roles, with an audit log of who changed the organization.
Add an endpoint under a domain and Certwatch probes the certificate that host is serving. The public utk.edu demo stays Certificate Transparency only and is never probed. Alerting to Slack, Teams, webhooks, or email is not in this version.
Pricing
Pricing coming soon
Placeholder — nothing is billed
These tiers are illustrative. They are not enforced, and Certwatch does not charge yet.
Free
Pricing coming soon
A place to watch a few domains and export the inventory.
Pro
Pricing coming soon
More domains and a shorter refresh interval.
Team
Pricing coming soon
The same owner, admin, and viewer roles, with room for more people.
Questions
Is the utk.edu demo affiliated with the university?
No. It is a read-only showcase built from public Certificate Transparency data for that domain name. Certwatch has no relationship with the university and holds no private data from it.
Will a certificate appear if it is not installed?
Yes. Transparency logs record issuance, not deployment. A name can show up because someone requested a certificate, even if you never installed it.
Who can see my inventory?
Only members of your organization. The public demo is the only inventory available without signing in.
Read the docs for roles, refresh timing, and how sign-in links work.