A brand-new utility drops every Friday — see the latest release
Network Security

Cert Watch

Find every SSL certificate you own — and never get surprised by an expiry again.

Windows & macOS v1.0.0 1 year of updates
One-time purchase
$79
Buy now →

Secure checkout — you’ll be taken to our store to complete your purchase.

Cert Watch expiry timeline showing 169 certificates grouped into expired, 30-day, 90-day and healthy bands
Cert Watch expiry timeline showing 169 certificates grouped into expired, 30-day, 90-day and healthy bandsFull certificate details: subject, issuer, validity, key, signature, SANs and every location it was seenFindings list flagging expired certificates and SHA-1/MD5 signatures with severitiesChoosing folders, Windows stores and hostnames to include in a certificate scan

What it does

Deep discovery

Finds certificates in local stores, config files, PEM, PFX and JKS bundles and whole folders.

Expiry timeline

Every certificate on one timeline, sorted by days remaining.

Weak-crypto flags

Highlights SHA-1 signatures, short keys and long-expired leftovers.

Chain checks

Spots incomplete chains and mismatched hostnames before browsers do.

Report exports

Share tidy HTML or CSV expiry reports with your team.

Offline & private

Scans run locally. Your certificates and keys never leave your machine.

System requirements

  • Windows 10 / 11 or macOS 12+
  • 4 GB RAM minimum
  • 100 MB free disk space
  • Read access to the folders or stores you want scanned
One-time purchase
$79 once, yours forever
  • ✓  Full version, no feature limits
  • ✓  One year of free updates
  • ✓  Use on your work & home machine
  • ✓  Friendly email support
Buy Cert Watch

Questions, answered

Does it need agents on my servers?
No. Run it where the certificates live, or point it at mounted paths and exported bundles — no agents, no remote access.
Can it renew certificates for me?
No — Cert Watch is a discovery and reporting tool. It tells you exactly what you have and when it expires; renewal stays in your existing process.
Is this a one-time purchase?
Yes — pay once and it's yours, including a year of free updates.
Do my keys or certs get uploaded?
Never. Everything is read and reported locally.