Hi Product Hunt 👋 I'm Rahul from IncubXperts, and CertHalo is the tool we built after one too many "why is the site showing a security warning?" calls. The usual reply is "but our renewals are automated." They are, until they aren't: • A renewal job fails silently (expired API token, changed DNS, rebuilt server) • The certificate renews, but the load balancer or CDN keeps serving the old one • Some certificates were never automated: vendor portals, appliances, client domains • Let's Encrypt has stopped sending expiry reminder emails • Lifetimes are shrinking to 200 days now, 100 in 2027 and 47 in 2029, so there are far more renewals that can go wrong CertHalo checks what your server actually presents to the internet, whatever tool did the renewal. You get: ✅ Reminders 60, 30, 14, 7, 3 and 1 day out (or your own schedule) ✅ Instant alerts when a certificate is renewed, revoked, changes issuer, mismatches its hostname or becomes unreachable ✅ An A–F health grade: chain, revocation (OCSP/CRL), key strength, TLS versions ✅ Alerts in email, Slack and Microsoft Teams, with shared team workspaces It's free for 3 certificates with no card, and there's a free one-off checker at certhalo.com/ssl-checker if you just want to test a site. This started as SSL Expiry Tracker, and CertHalo is the full rewrite. An API and webhooks are next. What would make this a must-have for your team? I'll be here all day answering questions.

CertHalo

Catch expiring or broken SSL certificates before users do

Catch expiring or broken SSL certificates before users do