SaQura CertWatch

Will your certificate expire while you happen to be looking elsewhere? SaQura CertWatch checks an address the way a browser would — and tells you where you stand in a single letter. Check Type a domain and the app opens the connection itself: you see what your server actually serves, not what the configuration says it should. Remaining validity, chain of trust, negotiated protocol, key, signature and revocation status — every card with a traffic light, and a grade from A to F above them. Open the grade and you read, in plain words, why it came out that way. New in this version: the certificate in full detail, the negotiated cipher suite, Certificate Transparency (is the certificate logged?) and your domain's CAA record. Plus "What to do" — one concrete next step for every finding, offline, without an account. Plus a question almost nobody asks: did your server choose a quantum-safe key exchange? The app shows what it actually settled on — and the watch filters on exactly that answer. Watch Up to three addresses stay under watch. The app re-checks them when you open it and in the background. The reminders follow the lifetime of each individual certificate: for a year, 30, 14, 7 and one day ahead; for 90 days, 21, 10, 5 and one; for shorter ones, 14, 7, 3 and one. Certificates keep getting shorter — the app works this out per address and tells you how often a year you will have to renew. No connection? Then the last known state is there, with its time, and the app tells you when it will try again. Where you are looking anyway A widget for the home and lock screen shows the next expiry. If you want it, a countdown runs along as a Live Activity. And as a shortcut you check one address, or the whole watch, without opening the app. Event log Every check, every change, every scheduled reminder and every error goes into a running log. Each entry carries the checksum of the one before it, so changing something after the fact breaks the chain visibly. One tap and you verify that yourself; one more and you export the lot. When three addresses are not enough "Extend the watch" raises the list to 25 addresses, once. One purchase, nothing recurring. CertWatch Pro Up to 100 addresses on the watch, a grade history per address, an alert to your own webhook address when a grade drops, and mail servers checked too: SMTP and IMAP with STARTTLS. $4.99 a month or $49.99 a year, the first week free. When the subscription ends your data and your list stay — the list simply stops growing. What the app does not do No account. No sign-in. No usage statistics, no advertising identifier, no third-party libraries. Your addresses stay on the device. Switch on iCloud sync and they also live in your private iCloud and on your other devices with the same Apple Account — no account with us for that either. It stays off until you switch it on. The check itself obviously goes out, but it goes straight to the server you typed. An error report is sent only when you send it — and you see its contents first. And when this is your job Anyone answerable to clients wants daily watching, email warnings and reports they can hand over and have verified. That is SaQura CertWatch on your own server: saqura.org/certwatch KyotoTech LLC, Kyoto. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://saqura.org/certwatch/app