Changelog

• Choose your reminder days. On any paid plan, pick when you're reminded before a certificate expires, from 90 days down to 1, and optionally every day for the last 3, 7 or 14 days. Give a single domain its own schedule, for example more reminders for the site that takes payments.
• Alerts in Slack and Microsoft Teams. Connect a channel with a webhook and CertHalo posts alerts there as well as by email. Choose Everything or Urgent only for each channel, so an on-call channel only hears about what can't wait.

Both are on the new Alerts page in your dashboard.

SSL Expiry Tracker, our earlier certificate monitor, has moved to CertHalo. Accounts and their monitored domains came across, and alerts carry on without a gap. Anyone who monitored more domains than CertHalo's free plan includes is on the Starter plan, free for a year.

Old passwords didn't move: sign in with your email address and choose Email me a code instead, or set a new password. The old addresses now lead to a page explaining the move.

Some mail systems hold emails from new senders for up to a minute, so waiting for a sign-in code could be slow. Now you don't have to wait:

• Sign up with a password and you're in at once. We email a link to confirm your address; until you do, we don't send you alerts.
• Sign in with a password, or choose Email me a code instead.
• Forgot your password? Get a reset link by email. Setting a new password signs you out on every other device.
• Account page: set or change your password, and Sign out everywhere. Already have an account from before? Set a password on your Account page.

Passwords that appear in known data breaches are refused, so yours is harder to guess.

• New: teams. On Pro (5 people) and Business (20 people), your company gets one shared list of domains. Invite colleagues by email as Members or Admins; everyone sees the same domains, and each person chooses whether they get the alert emails. Alerts no longer depend on whoever added a domain years ago. See your Team page.
• Improved: unsubscribing. The unsubscribe link in our emails now stops all CertHalo emails, not just certificate alerts. Sign-in codes still arrive when you ask for one.
• Fixed: a page left open while we released an update could fail when you pressed a button. It now reloads itself once and carries on.

• New: revocation checks. A certificate its issuer has revoked is refused by browsers, so it now gets an F and an alert. We check the server's stapled response, then the issuer's OCSP service, then its revocation list.
• New: guides. Step-by-step fixes for the problems we see most: a missing intermediate certificate, Certbot renewals that fail quietly, Nginx, Apache, IIS, AWS Certificate Manager, Cloudflare and more. All guides.
• Improved: sign-in. Sign-in emails now carry a 6-digit code to type in, which works even when your mail system opens links before you do.
• Improved: privacy. Visitors in Europe choose whether analytics cookies load. Change your choice any time with Cookie settings at the bottom of every page.

CertHalo checks your websites' SSL certificates from the outside, the way visitors' browsers see them, and emails you before anything goes wrong.

• Free SSL checker: an A–F grade, the expiry date, the full certificate chain, the hostname match and which TLS versions the server accepts. Try it.
• Monitoring: add a domain and we check it every day, and email you 60, 30, 14, 7, 3 and 1 days before its certificate expires.
• Alerts when something changes: a renewed certificate, a new issuer, a hostname mismatch, an untrusted chain, or a site we can't reach.
• 3 certificates free, forever. No card.