What you’re signing up for
Certfly
Watch your TLS certs so you don't have to.
-
Free tools (SSL Shopper, ssllabs.com, crt.sh) check one domain on demand. Certfly opens a real TLS connection on every dashboard load and parses the DER — so what you see matches what your users' browsers see, not what a stale CT log says.
-
Let's Encrypt auto-renew silently breaks more often than people admit — a deploy script forgets to reload nginx, a wildcard hits a rate limit, the renewal cronjob's user changed. We surface 'expired' and 'untrusted chain' on the same row, so you catch both classes of failure.
-
Issuer/SAN drift goes unnoticed: a CDN rotation or a misconfiguration changes the issuer or SAN list, but nothing flags it until end-users hit errors. We show you exactly which CN, which SANs, which signing algorithm — so the moment something flips, you see it.
Free tier
No card required. Upgrade anytime.