SSL expiry monitoring
Live TLS handshakes over node:tls. No agent on the target host, no DNS gymnastics. Captures issuer, chain, validity window and SANs. Alerts at 30, 7, 1 days — and on expiry.
Self-hosted SSL certificate & domain expiry monitor with multi-channel alerts.
Let's Encrypt stopped sending expiry emails on June 4, 2025. Certificate lifetimes are shrinking to 47 days by 2029. SSLert fills the gap — for free, forever, for the self-hosters — or as a fully managed service for the rest of us.
On June 4, 2025 Let's Encrypt shut down their certificate-expiration notification emails — the same emails tens of thousands of operators relied on as their first line of defense against an outage.
And it's only going to get worse. The CA/Browser Forum has approved a roadmap that shrinks public TLS certificate lifetimes to 47 days by 2029, with intermediate steps at 200, 100 and 90 days already in motion. Shorter lifetimes mean more frequent renewals, more chance of a mistake, and more chance of a silent expiry.
SSLert is the lightweight replacement. It watches every certificate and domain registration you point it at — quietly, on a schedule, with the alerts going wherever you already read messages.
Six core capabilities, all in one dashboard. Up and running in under a minute.
Live TLS handshakes over node:tls. No agent on the target host, no DNS gymnastics. Captures issuer, chain, validity window and SANs. Alerts at 30, 7, 1 days — and on expiry.
Tracks domain registration expiry via RDAP bootstrap, with a TCP-WHOIS fallback for TLDs that don't speak RDAP. Same 30/7/1-day alert schedule as SSL.
Email, generic webhook, Telegram, Slack and ntfy. Per-domain channel config — turn off the noisy ones, keep the ones you actually read.
Built-in /metrics endpoint. Expiry counts, check latency, per-domain status. Drop the dashboard into your existing Grafana and you're done.
One-click export of your domain list, alert config and check history. Restore into a new workspace in seconds. Your data, portable.
Supabase auth, Stripe billing, team workspaces, audit log on the Team plan. Bring your whole ops org on board without sharing credentials.
Start free. Upgrade only when you outgrow it. Cancel anytime.
For personal projects and small sites.
For freelancers and small teams running production.
For agencies and ops teams with lots of domains.
No credit card. No agent on your servers. Add a domain, paste a webhook, get alerts.