# SSL certificate monitoring | Precursor Intelligence **Never be caught out by an expired certificate. We warn you before it runs out.** > SSL certificate monitoring keeps an eye on the certificate behind each domain you add, keeps checking it and warns you before it expires, so you can renew it before visitors see a security warning. It is for anyone responsible for a business website, whether that is the owner, an IT lead or a security team. Canonical page: https://www.precursorintelligence.com/features/ssl-certificate-monitoring Breadcrumb: [Home](https://www.precursorintelligence.com/) > [Features](https://www.precursorintelligence.com/features) > SSL certificate monitoring Start free: https://www.precursorintelligence.com/register · Book a demo: https://www.precursorintelligence.com/contact Checked continuously. Warnings in the app. Nothing to install. Example data on this page uses the fictional company Acme (acme.co.uk, acme.ie, acme-hire.co.uk). Certificate issuers shown are fictional. ## Contents 1. [What do we check?](#what-do-we-check) 2. [How does it work?](#how-does-it-work) 3. [When does each certificate run out?](#when-does-each-certificate-run-out) 4. [Can I see everything about a domain?](#can-i-see-everything-about-a-domain) 5. [Questions](#questions) 6. [Related features](#related-features) ## What do we check? Add a domain once and its certificate is watched from then on. These are the things you get, and where to look for the rest: 1. **The certificate on each domain.** Every domain you add, such as acme.co.uk, has the certificate it presents to visitors watched. 2. **Checked continuously.** We keep looking, so the page shows the certificate that is live on your domain. 3. **Expiry date and days left.** When each certificate runs out, sorted so the soonest is at the top. 4. **A warning before it expires.** An alert in your notifications in the app, beside your other alerts. 5. **Certificates on other hosts.** An [attack surface scan](https://www.precursorintelligence.com/features/attack-surface-management) records the certificate on every host it finds, with who issued it and when it expires. 6. **One page per domain.** Certificate, lookalike domains, email set-up and recent activity together, with domains grouped by brand. 7. **Lookalike checks included.** The same monitoring watches each domain for lookalikes using your name. See [brand protection](https://www.precursorintelligence.com/features/brand-protection). 8. **In your AI assistant.** Our [MCP server](https://www.precursorintelligence.com/features/mcp-server) can list your certificates for Claude, Cursor and other assistants. ## How does it work? There is nothing to install on your servers. We look at the certificate your domain shows to the internet, the same one a visitor's browser sees. 1. **Add your domain (once).** Type in the domain you want watched, such as acme.co.uk. Nothing is installed on your servers. 2. **We check its certificate (continuously).** We read the certificate the domain presents to the internet and record when it expires. 3. **You get a warning (before it runs out).** An alert appears in your notifications in the app, so there is time to renew. 4. **We see the new one (after you renew).** We pick up the new certificate and its new expiry date. ## When does each certificate run out? **Expiry dates and warnings.** Every certificate sits on one page, sorted by how soon it expires. Before one runs out, a warning lands in your notifications in the app, next to your other alerts. Renew it with whoever issued it and we pick up the new date on our next look. - Days left, front and centre, with who issued each certificate and when we last checked. - Warned before it expires, beside your lookalike domain and vulnerability alerts, not after visitors see an error page. - Kept under watch, so a renewed certificate shows up soon after you renew it. - Ask your AI assistant. Our MCP server can list your certificates for assistants such as Claude. Monitoring covers the domains you add. For every other host, run an [attack surface scan](https://www.precursorintelligence.com/features/attack-surface-management), which records each certificate it finds. To see every alert channel, read [alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting). Example (Acme, sorted by days left): acme-hire.co.uk expires 22 Oct 2026 (7 days left, expiring soon); acme.ie expires 1 Dec 2026 (47 days); acme.co.uk expires 17 May 2027 (214 days); acme-group.co.uk expires 12 Aug 2027 (301 days); acmeshop.co.uk has no certificate because nothing answers on HTTPS. ## Can I see everything about a domain? **One page per domain.** Each domain has its own page: its certificate, the lookalike domains imitating it, how its email is set up against spoofing, and what has happened recently. Group several domains into one brand to keep them together. Example (acme.co.uk): certificate valid, 214 days left, checked today; 3 open lookalikes, newest acme-payro11.com, which can receive email; email set-up shows SPF in place and DMARC set to monitor only. ## Questions ### Which certificates do you check? The certificate on each domain you add, which we keep checking. To see the certificates on all your other hosts, such as a shop or VPN address, run an attack surface scan, which records every certificate it finds. ### How will I be warned? Before a certificate expires, a warning appears in your notifications in the app, alongside your lookalike domain and vulnerability alerts. ### Do I need to install anything? No. We check the certificate your domain shows to the internet, the same one a visitor's browser sees. Nothing goes on your servers. ### Can my AI assistant see my certificates? Yes. With an API key that has organisation access, assistants such as Claude can ask our MCP server to list your certificates. ### Can I see a domain's certificate next to its other details? Yes. Each domain has its own page with its certificate, the lookalike domains imitating it, how its email is set up and its recent activity. ## Related features - [Brand protection](https://www.precursorintelligence.com/features/brand-protection): continuous monitoring for lookalike domains using your name, with takedown emails drafted for you to send. - [Attack surface management](https://www.precursorintelligence.com/features/attack-surface-management): map everything of yours that anyone online can reach, and see what changed since your last scan. - [Alerts and reporting](https://www.precursorintelligence.com/features/alerts-and-reporting): alerts by email, in the app or by webhook as soon as we spot something, plus PDF reports you can share. - [New domain monitoring](https://www.precursorintelligence.com/features/domain-monitoring): newly registered domains containing your brand name, picked up from registry changes and certificate logs as they appear. - [All features](https://www.precursorintelligence.com/features) ## Get started Stay ahead of expiry dates, on every domain. Add your domains and we keep checking the certificate behind each one, warn you before it runs out and show every certificate and its expiry date on one page. Nothing to install. - Start free: https://www.precursorintelligence.com/register - Book a demo: https://www.precursorintelligence.com/contact - Nothing to install · Unlimited team members · Data stored in London · Two-factor sign-in for everyone