TLS certificate checks
Expiry and days left, hostname match including single-label wildcards, chain completeness, self-signed and not-yet-valid certificates — checked on port 443.
SSL & domain-expiry monitoring
Catch expiring certificates and domains before they lapse.
Domainvane watches the hostnames you add. It checks the TLS certificate on port 443 and the domain-registration expiry, and flags them on your dashboard when either is 30, 14, 7, or 1 days out. Paid checkout is open. The dashboard shows status today. Email alerts are delivered to external inboxes, including Gmail. Inbox placement is not guaranteed for every provider (Outlook and Yahoo have not been tested). Built for web agencies and MSPs that hold a lot of client names.
The free plan covers 3 domains with dashboard monitoring today. No card required. Solo, Agency, and Agency+ are available with paid checkout. Email alerts reach external inboxes, including Gmail. Inbox placement is not guaranteed for every provider.
app.acme-client.com
TLS · registry
shop.brightlabs.io
Expiring soon
pay.nordic-mail.se
Certificate expired
portal.finchdata.com
First check running
cdn.harbor-studio.dev
TLS · registrar
Acme Co — status report
Read-only · shared at /r/…
www.acme.comvalid
mail.acme.comvalid
The problem
An expired certificate or registration looks like the agency's fault.
Auto-renew covers a lot of certificates until it fails quietly. A spreadsheet does not scale across dozens of clients, and it never notices a chain that no longer validates or a name that no longer matches the certificate.
What you get
The alerting layer for certificates and domains.
Your certificate authority still issues the certificate and your registrar still renews the domain. Domainvane keeps the latest status and threshold state visible on your dashboard.
Domain-registration expiry
Expiry comes from RDAP with registry or registrar provenance. If the date is missing or ambiguous, the result is unknown. No WHOIS fallback, no guessing.
A small number of alerts
Threshold logic at 30, 14, 7, and 1 days before expiry, plus a failure alert after 3 consecutive failed checks, with a 24-hour cooldown per incident. These show on your dashboard. Email alerts are delivered to external inboxes, including Gmail; inbox placement is not guaranteed for every provider (Outlook and Yahoo have not been tested).
One dashboard, bulk add
Paste a list separated by newlines, commas, or spaces. Each entry comes back added, duplicate, invalid, or over the plan limit. Names are normalized and deduped.
Client report pages
Agency and Agency+ publish a read-only page at /r/<token> for a chosen list of hostnames. The token is a bearer link, not authentication, and can be revoked.
Pause without deleting
A paused hostname stays on the account and counts toward the cap, but is not checked or alerted until you unpause it.
How it works
Add hostnames. Domainvane watches. You get a heads-up.
1
Add hostnames
Paste one name or a list. Each entry is normalized (lowercase, IDNA) and deduped. The port is 443.
2
Checks on a schedule
A healthy hostname is checked about every 24 hours. When a certificate has 7 days or fewer, or a check is failing, the next check is about 6 hours out.
3
Status, not noise
Threshold and failure results flag the domain on your dashboard, without repeating the same incident inside a 24-hour cooldown. Email alerts for those results are delivered to external inboxes, including Gmail. Inbox placement is not guaranteed for every provider.
4
Client pages
Agency and Agency+ publish a read-only bearer-link status page for selected hostnames. Paid checkout is open.
Certificate lifetimes are getting shorter.
CA/Browser Forum Ballot SC-081v3 limits a publicly trusted subscriber certificate to a maximum validity of 200 days when issued on or after 15 March 2026, 100 days on or after 15 March 2027, and 47 days on or after 15 March 2029 (Baseline Requirements section 6.3.2). More renewals means more chances to miss one.
Source, checked 2026-09-25: the ballot page and the requirements text merged from that ballot.
Pricing
Priced by how many hostnames you monitor.
Every plan uses the same checks and the same alert rules. Start free, or choose Solo, Agency, or Agency+ — paid checkout is open.
Free
$0
Available now
3 domains · dashboard monitoring
Solo
$9/mo
Available now
25 domains · 1 webhook
Agency
$29/mo
Available now
150 domains · Slack-compatible webhook · 50 reports
Agency+
$79/mo
Available now
750 domains · 200 reports
Common questions
The honest answers.
Does Domainvane renew my certificates?
No. Domainvane shows status and alert state on the dashboard and sends email alerts to external inboxes, including Gmail. Inbox placement is not guaranteed for every provider. Your CA renews the certificate and your registrar renews the domain.
Are email alerts live yet?
The dashboard always shows each domain's SSL and expiry status. Paid checkout is open. Email alerts are delivered to external inboxes, including Gmail. Inbox placement is not guaranteed for every provider (Outlook and Yahoo have not been tested). This is delivery to external inboxes, not a promise that every provider will place the message in the primary inbox.
What does the free plan include?
Three domains with dashboard monitoring — enough to see a real check land on your list. Email alerts on that plan reach external inboxes, including Gmail. Solo adds more names and a generic JSON webhook. Agency and Agency+ add a Slack-compatible webhook and read-only client report pages; Solo does not include report pages.
Start watching your certificates today.
Three domains with dashboard monitoring on the free plan. No card required.