What you can do with it
Expiry at a glance
Days left and expiry date for every target, failures first.
Real problems flagged
Expired, expiring soon, name mismatch, untrusted or self-signed chain, unreachable hosts.
Weak settings warned
TLS 1.0/1.1 and SHA-1 signatures are flagged.
Text or CSV targets
Simple host:port lists, or CSV with labels and owners.
Automation-ready
Exit code 0/1/2 plus CSV and JSON output.
No install
Windows PowerShell 5.1 only — no modules, no admin rights.
See it before you buy
What's in the download
| CertWatch.ps1 | The PowerShell tool itself (plain text, readable before you run it) |
| targets-example.csv | List of hosts to check (edit to add your own) |
| targets.txt | List of hosts to check (edit to add your own) |
| README.md | Setup and how-to guide |
| CHANGELOG.md | Version history |
| LICENSE.txt | Licence terms |
Version 1.0.1. One ZIP file, no installer, nothing sent anywhere.
Why buy it instead of building it
Tested before release, readable by you
The tool is plain-text PowerShell, so you or your security team can read every line before running it.
Comes with a README and sample output
You can see what the reports look like before you run it on your own machines.
A person answers support email
Write to [email protected] and get a reply within 2 business days. If it doesn't work as described, you get a refund within 30 days.
What you need
- Windows 10 or Windows 11
- Windows PowerShell 5.1 (built in)
- Network access to the targets
- Tested on Windows 11 23H2
What it doesn't do
- Implicit-TLS ports only (443, 993, 995, 465, 636, 8443…); STARTTLS not supported.
- Reports only — no renewal or alert sending.
- Trust is evaluated with this PC's certificate store.
CertWatch is part of the IT Admin Toolkit
Get 3 products for $14.70$21 instead of $30:SysLens, CertWatch, RenewalBook.
Buy the bundle for $14.70$21How buying works
- Pay onceCheckout by Polar or Gumroad. Card details never touch this site.
- Download straight awayThe download link appears after payment and arrives by email with your receipt.
- Open and use itFollow the README to set it up.
Questions
Do I need admin rights?
No.
Can it check internal servers?
Yes — anything this PC can reach on a TLS port, including internal names and IPs.
Does it send data anywhere?
It only connects to the targets you list to read their certificates.
What if it doesn't work for me?
Email [email protected] within 30 days of purchase. We'll try to fix the problem first; if we can't, you get a full refund through the store you bought from.
You might also need
OnboardBook
Every joiner and leaver step - accounts, MFA, devices, licences, access - tracked to sign-off.