Features page (certificate monitoring) — Oh Dear

Cited by

Facts read from this source

• Check interval Report an error

  “Oh Dear checks the live certificate chain every 30 minutes, shows what changed, and alerts you when something is wrong.”

• Trial Report an error

  “10-DAY FREE TRIAL · NO CREDIT CARD REQUIRED”

• External verification Report an error

  “Oh Dear connects from outside every 30 minutes and evaluates the certificate your server actually presents, not the file a provider says it issued.”

• Change comparison Report an error

  “When a renewal changes the served certificate, a before-and-after comparison shows exactly what changed.”

• Dns monitoring Report an error

  “A server move can change more than the certificate. See DNS changes too with DNS monitoring.”

• Chain validation Report an error

  “Oh Dear evaluates the leaf and the intermediate certificates the monitored endpoint returns. It reports the served chain; it does not discover every certificate your organisation owns.”

• Not renewal automation Report an error

  “Oh Dear reports what it observes. Renewal, deployment and repair stay with your existing automation or provider.”

• Checks expiry identity Report an error

  “Is a certificate installed, unexpired and valid yet?”

• Checks hostname Report an error

  “Does the certificate cover the monitored domain?”

• Checks lifetime Report an error

  “Is the certificate valid for longer than the 398 days browsers accept?”

• Checks chain health Report an error

  “Do the certificates the server presents form a trusted chain?”

• Checks signature Report an error

  “Is a SHA-1 certificate still in the chain?”

• Checks self signed Report an error

  “Is the endpoint presenting a certificate public clients will not trust?”

• Checks change history Report an error

  “Which certificates and past check results have been observed?”

• Alert channels Report an error

  “S Slack E Email {} Webhook”

• Per site alert routing Report an error

  “send each site's alerts only to the person responsible, on the channels your team already uses, without paging everyone for every renewal.”

• All plans include Report an error

  “Certificate health is included with Oh Dear's website-health checks on every plan. Choose by the number of sites you monitor, not by which checks you need.”

• Faq expiry warning default Report an error

  “By default, 7 days ahead for a Let's Encrypt certificate and 14 days ahead for any other issuer, matching the renewal window each one expects. You can raise that threshold per site, up to 100 days, if your renewal process needs more time.”

• Full chain validation faq Report an error

  “Yes. Oh Dear validates every certificate the monitored server presents, including the intermediates. It reports the chain that endpoint serves, so it will not discover certificates the endpoint never presents.”

• Auto renewal faq Report an error

  “No. Oh Dear monitors the certificate from outside and alerts your team. Issuance, renewal and deployment stay with your existing automation or provider.”

• History retention Report an error

  “Yes. Detected certificates and past certificate check runs stay available, so you can inspect what the endpoint served previously.”

• Unified dashboard Report an error

  “Yes. Every monitored site's certificate, including its issuer, expiry date, and chain, appears in one dashboard with per-site alerts.”

• Docs available Report an error

  “Read the certificate health documentation →”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Agency Developer Checks, locations & failure confirmation
• The E-Commerce Operations Manager Checks, locations & failure confirmation
• The SaaS Platform Engineer Checks, locations & failure confirmation