NotAfter: TLS Monitor

NotAfter shows you when TLS certificates expire – before a forgotten expiry date turns into an outage. Add your servers; the app reads the complete certificate chain, evaluates it and reminds you in time. MONITOR • HTTPS and any TLS port (443, 8443, 636, 993, 995 …), optionally with its own SNI name for checks by IP address • STARTTLS: SMTP, IMAP, POP3, FTP and LDAP • RDP (Windows Remote Desktop, including NLA) • Certificate files (.cer, .crt, .pem, .pfx, .p12) for code signing, gateways or S/MIME • The whole chain: intermediate certificates expire too EVALUATE • Days remaining per certificate, color coded • Warnings for hostname mismatch, self-signed certificates, missing intermediates, wrong chain order, SHA-1, RSA below 2048 bits and TLS 1.0/1.1 • Issuer, subject alternative names (SAN), key type and size, signature algorithm, TLS version • Internal certificates (e.g. from an Active…