Certificate Transparency monitor for all your domains

WebPixie surfaces certificate validity, chain trust, expiration, TLS configuration, and ownership details for each monitored site. SSL monitoring extracts the full certificate chain from leaf to intermediate to root, then verifies cryptographic signatures for RSA and EC/ECDSA certificates. It also reports TLS version, cipher suite, key exchange, key strength, Subject Alternative Names, OCSP and CRL endpoints, and Extended Key Usage OIDs. Expiration tracking is included, with default warnings 15 days before a certificate expires so teams have time to renew. SSL check failures and expiration events can create incidents through incident management, depending on your plan. Teams managing several domains can use the Certificates Manager to keep certificate status centralized across domains and subdomains.

Yes, WebPixie tracks SSL certificate status, expiration, trust chain, and TLS configuration for monitored sites. SSL monitoring runs daily checks that validate the full certificate chain from leaf to intermediate to root, verify cryptographic signatures, and inspect TLS version, cipher suite, key exchange, and key strength. WebPixie also surfaces Subject Alternative Names, OCSP and CRL endpoints, and Extended Key Usage OIDs; Certificate Transparency entries are available in the Certificates Manager. Expiration alerts are sent by default 15 days before a certificate expires, giving your team time to renew before visitors see browser warnings. SSL check failures and expiration events can create tracked incidents through incident management, depending on your plan. If you manage several domains or subdomains, use the Certificates Manager to keep certificate health centralized.

The Certificates Manager periodically pulls Certificate Transparency logs for each domain you add and lists the certificates issued for it and its subdomains. For every certificate it shows the common name, the identity or SAN, the validity window, the issuer, and the serial number, so you have a running record of what has been issued in your name. Certificate Transparency is a public, append-only log that certificate authorities write to when they issue a certificate, which makes it possible to spot issuance you did not expect. This is different from SSL monitoring, which validates the certificate your own site actually serves; the Certificates Manager watches what exists in the public record. It is enabled automatically when SSL monitoring is active, and you can compare plan limits on the pricing page.

Yes, WebPixie checks SSL certificates daily and sends expiration warnings by default 15 days before renewal is due. SSL monitoring reads the certificate chain, verifies trust, checks the expiration date, and surfaces details such as issuer, subject names, TLS version, cipher suite, and OCSP and CRL endpoints. Early warning matters because an expired certificate can trigger browser security warnings, block customer trust, and make checkout, login, or form submission feel unsafe. If a certificate check fails or expiration reaches an alert threshold, WebPixie can notify your team and, on supported plans, create an incident through incident management. Teams with several domains or subdomains can use the Certificates Manager to keep certificate status visible in one place.

Yes. Because the Certificates Manager reads Certificate Transparency logs, it surfaces certificates issued for your domain and subdomains even when they were not requested through your own process. An unexpected certificate can signal a misconfiguration or an unauthorized issuance, and seeing it in the log is the first step to acting on it, so you can tell a legitimate renewal from something that warrants review. The same data set powers subdomain discovery: subdomains found in Certificate Transparency logs and in your main certificate's SANs are listed with an action to start monitoring each one. WebPixie reports what the public record shows; it does not issue, renew, or revoke certificates, which stays with your certificate authority. This complements the per-site checks in SSL monitoring, and you can compare plan limits on the pricing page.