WebPixie
Monitoring WebsitesSite Deep Dive

Certificates

The Certificates section lists SSL certificates detected on the internet associated with the monitored domain.

Through this section, users can review:

  • SSL certificates found in Certificate Transparency logs for the domain
  • Which domain names each certificate covers
  • Certificate validity dates
  • Certificate providers

This information is particularly useful for understanding which certificates cover the domain and its subdomains.

This section is enabled automatically whenever SSL/TLS Monitoring is active for the site — there's no separate toggle for it. It works differently from the SSL section: instead of checking the certificate currently served by the site, it periodically pulls Certificate Transparency (CT) logs to list the certificates found there for the domain and its subdomains — useful for spotting unexpected or unauthorized certificate issuance.

Purpose of the Certificates Section

The Certificates section is particularly useful for:

  • Viewing the SSL certificates found for the domain
  • Identifying which domain names each certificate covers
  • Noticing old or unnecessary certificates
  • Examining which certificates protect subdomains

This allows users to better analyze SSL usage in their infrastructure.

Certificate List

On the certificate screen, certificates associated with the domain are displayed in a table format.

Each row represents an SSL certificate and contains basic information about the certificate.

Common Name

Common Name (CN) shows the main domain name the certificate belongs to.

This field typically represents the domain or subdomain for which the certificate was originally created.

Example

example.webpixie.io

Identity Name

The Identity Name field shows the domain names defined within the certificate.

This field typically contains Subject Alternative Names (SAN) information.

A certificate can be used for multiple domain names. In this case, all domain names are listed in this section.

For example, a certificate can cover the following domain names:

Example

api.example.com

example.com

cdn.example.com

In some rows, you may see the "+ more" label. This indicates that there are additional domain names covered by the certificate.

Start Date

The Start Date field shows the date when the certificate became valid.

This date indicates when the certificate was originally created.

End Date

The End Date field shows the date when the certificate's validity will expire.

This date specifies how long the certificate can be used.

Issuer

The Issuer field shows the Certificate Authority information that provided the certificate.

Example providers:

Example

DigiCert

Let's Encrypt

GlobalSign

Sectigo

This shows which Certificate Authority issued the certificate.

Serial Number

The unique serial number assigned to the certificate by its issuing Certificate Authority.

On this page