30 days before
The first reminder arrives with plenty of time to plan — order the new certificate, book the change, or simply confirm your automatic renewal has it covered.
CertControl · Certificate monitoring
Never let a certificate expire and scare your customers away
A certificate is what gives your site the little padlock and lets browsers trust it. When one expires or breaks, browsers warn customers that your site is "not secure" — or block them entirely. CertControl finds every certificate you have, including the ones nobody remembers, checks they're healthy, and reminds you well before any of them runs out. It keeps watch; the actual renewing stays with you and your provider, exactly where it belongs.
Free during early access · No credit card · Part of the TrustCtrl platform
Finds them for you
A complete list of your certificates — including the forgotten ones
Certificates turn up in places nobody keeps track of: an old campaign site, a test address, a system someone set up years ago. CertControl keeps looking on its own, so your list reflects reality — not the last time someone updated a spreadsheet.
Finds certificates you forgot you had
Every certificate issued for your domains is recorded in public logs (Certificate Transparency). CertControl watches those logs for you, so certificates on forgotten addresses — or ones a supplier set up without telling you — show up in your list automatically.
See exactly what each one covers
A single certificate often protects several web addresses at once. CertControl shows you every name it covers — so when a certificate protects twelve addresses, you know which twelve.
Always up to date
The list keeps itself current. New certificates appear as they're issued, so the picture never goes stale between one check and the next.
Add the internal ones too
Have certificates that live inside your own systems, where an outside scan can't reach? Your developer can import those into the same list, so everything sits in one place.
Healthy, not just valid
"Not expired yet" doesn't mean "no problem"
A certificate can be months from running out and still cause trouble. CertControl checks each one — and the security settings behind it — for the problems that make browsers throw up warnings or that fail a security review.
Set up correctly, everywhere
Some certificates work fine on the computer they were tested on and fail for real visitors — because a piece is missing or wrongly configured. CertControl catches those setup problems (an incomplete chain, an untrusted or self-signed certificate) before your customers do.
Instant alert if one is withdrawn
Occasionally a certificate is cancelled (revoked) before its expiry date and can no longer be trusted. CertControl treats that as urgent — you get an email right away, not a note you find next week.
Weak or outdated certificates flagged
Certificates built with weak or outdated security get flagged — before a browser maker or an auditor flags them for you.
Outdated encryption surfaced
CertControl also checks the encryption settings your site offers, so anything still using old, insecure methods shows up as something to fix.
No nasty surprises
Expiry never arrives unannounced
CertControl doesn't renew certificates for you — on purpose. Renewing belongs with you and your provider. CertControl's job is to make sure the deadline never takes you by surprise, whoever does the renewing.
10 days before
If it still hasn't been replaced, a second reminder lands while there's still comfortable time to act.
Expired — or withdrawn
If a certificate expires anyway, you get a notice. And if one is ever cancelled early, you get an urgent email the moment it's spotted.
Part of the whole picture
Certificate health feeds your overall score
CertControl is one of the five parts of TrustCtrl, all feeding into one simple picture of your business online — so certificate health sits right alongside your uptime, website quality, brand and email.
One list, one score
Certificate issues land in the same prioritised list as everything else and count towards each website's health score — which never appears without an explanation of what's pulling it down.
Explained for you and your developer
Every issue comes with a plain-language explanation, likely causes, step-by-step fix and how to check it worked — in a simple view for you and a technical view for your developer.
Frequently asked questions
CertControl — questions answered
What is a certificate, and why should I care?
A certificate is what puts the padlock in the browser bar and lets browsers trust your website. If it expires or breaks, visitors get a "not secure" warning or are blocked entirely — which costs you sales and trust. CertControl keeps track of all of yours and warns you before that happens.
Does CertControl renew my certificates for me?
No — and that's deliberate. CertControl watches your certificates; renewing them stays with you or your provider. Its job is to make sure expiry never surprises you, with reminders 30 and 10 days ahead plus a notice if one expires anyway.
Can it find certificates I've forgotten about?
Yes. Every certificate issued for your domains is recorded in public logs, and CertControl watches those logs — so certificates on forgotten addresses, or ones a supplier set up without telling you, appear in your list automatically.
What problems does it catch besides expiry?
It checks that each certificate is set up correctly (so it doesn't fail for real visitors), flags weak or outdated certificates and encryption, and warns you immediately if a certificate is cancelled before its expiry date. Everything comes with a plain-language explanation and a fix.
Get started
See all your certificates today
Add your website and CertControl starts finding and checking your certificates automatically — alongside the other four parts of TrustCtrl. Free during early access, no credit card required.
Free during early access · Nothing is created until you confirm your email