Certly
Free check Pricing Sign in Get started

SSL, domain & DNS monitoring

Don't find out your SSL expired
when your customers do.

Auto-renewal fails silently. Certly watches what your server actually serves — and warns you before it's a crisis.

Free for 2 sites · No credit card required
or
Is your SSL about to expire? Check free →
Product preview

Everything expiring, at a glance

One dashboard. SSL certs, domain expiry, and DNS/DNSSEC for all your sites — with a timeline of every DNS change. Alerts before anything lapses.

certly.dev/app
Monitoring6
OK3
Warning2
Critical1
HostTypeSSL expiryDomain expiryDNS
api.example-app.com
SSL + Domain287d312d89d
shop.demo-store.net
SSL + Domain18d45d21d⚠ Changed
blog.example-site.io
SSL142dno DNSSEC
admin.oldsite.example
SSL + Domain2d190d78d⚠ Changed
docs.example-project.dev
SSL + Domain22d8d120d
legacy.corp-demo.net
SSL + Domain

Recent DNS activity

Last 30 days
  • admin.oldsite.exampleNSNS record changed
    ns1.oldhost.examplens1.newhost.example
  • shop.demo-store.netMXMX record removed
    10 mail.demo-store.net
  • api.example-app.comAA record changed
    203.0.113.10203.0.113.24
  • docs.example-project.devTXTTXT record added
    v=spf1 include:_spf.example.com ~all

Add monitor

4 / 25
SSL + Domain
Add & check
HostTypeSSL expiryDomain expiryDNS
api.example-app.com
SSL + Domain287d312d89d
DetailsEditDelete
shop.demo-store.net
SSL + Domain18d45d21d⚠ Changed
DetailsEditDelete
blog.example-site.io
SSL142dno DNSSEC
DetailsEditDelete
admin.oldsite.example
SSL + Domain2d190d78d⚠ Changed
DetailsEditDelete

Expiry monitoring

Domain · SSL · DNSSEC
Domain registration
190d2026-12-21 00:00 UTC
SSL certificate
2d2026-06-16 11:30 UTC
DNSSEC signature
78d2026-08-31 00:00 UTC

DNS Activity

⚠ Recent dangerous changeLast 30 days
  • NSNS record changed
    ns1.oldhost.examplens2.oldhost.examplens1.newhost.examplens2.newhost.example
  • AA record changed
    198.51.100.7198.51.100.42

Current DNS records

Captured 2026-06-14 02:00 UTC
A
198.51.100.42
AAAA
2001:db8::42
MX
10 mail.oldsite.example
NS
ns1.newhost.examplens2.newhost.example
TXT
v=spf1 include:_spf.oldsite.example ~all

Add notification channel

Slack webhook
Add
TypeDestinationStatus
Emailalerts@example-app.comActiveRemove
Slack webhookhooks.slack.com/services/T0AB/B0…ActiveRemove
Discord webhookdiscord.com/api/webhooks/123…ActiveRemove
Custom webhookhooks.example-project.dev/certlyDisabledRemove
Start monitoring — free No credit card required

Why Certly

Checks what your server actually serves
Not issuance records. If auto-renewal ran but the cert wasn't deployed correctly, Certly catches it — before your customers see a browser warning.
Staged alerts: 30, 14, 7, and 1 day out
Slack, Discord, or email. Enough runway to act before it becomes an emergency call from a client.
DNSSEC expiry, watched too
DNSSEC signatures expire like certificates do — and when they lapse, resolution breaks everywhere. Certly tracks RRSIG expiry, ignores healthy auto-rotation, and alerts the moment signatures stall, expire, or fail validation.
Every DNS change, on a timeline
A record changed, MX removed, NS swapped — Certly records each DNS change newest-first and flags the dangerous ones, so a silent hijack or misconfig never slips by.

Pricing

Free
$0
2 sites · No credit card required
Get started
Pro
$12 / mo
25 sites · Slack, Discord, email
Get started
Business
$39 / mo
150 sites · Client grouping
Get started
Compare all plans →