Skip to content

Releases: nizartuanku/certlight

Release list

v0.1.1 — CertLight (renamed from CertWatch)

v0.1.1 — CertLight (renamed from CertWatch) Latest
Latest

Choose a tag to compare

View all tags
@nizartuanku nizartuanku released this 23 Aug 14:03
v0.1.1
a27a3f9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

CertWatch is now CertLight — same product, new name. Self-hosted TLS & certificate monitoring with the configuration audit most uptime tools skip.

What changed in this release:

  • Renamed everywhere: binary is now certlight, module path is github.com/nizartuanku/certlight (old repo URLs redirect).
    • Nothing else: same licence keys, same database format, same checks. The internal product id stays "certwatch", so existing licences and databases keep working — an in-place upgrade is just swapping the binary.
      Quick start:
      ./certlight
      Open http://127.0.0.1:8422, add a host, see results in seconds.

Free edition: 10 hosts, 7-day history, webhook notifications. Pro (100 hosts) and Team (unlimited) at whop.com/nizar-tuanku/certlight-tls-monitor — 14-day trial.

Download: certlight-free-0.1.1-linux-amd64.tar.gz. Verify with SHA256SUMS (sha256sum -c SHA256SUMS). Apache-2.0.

Assets 4
Loading

CertWatch v0.1.0 — first release

CertWatch v0.1.0 — first release

Choose a tag to compare

View all tags
@nizartuanku nizartuanku released this 16 Aug 10:11
v0.1.0
e984813
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First public release of CertWatch — self-hosted TLS & certificate monitoring with configuration grading.

Free edition: monitor up to 10 hosts, webhook notifications, 7-day history. This build has no license activation — it is the permanent free edition.

Install

tar xzf certwatch-0.1.0-free-linux-amd64.tar.gz
./certwatch
# open http://127.0.0.1:8422 and add your first host

Verify the download: sha256sum -c SHA256SUMS

What it checks

Expiry (staged 30/14/7/1-day severities), expired certs, hostname mismatch, untrusted/self-signed chains, missing intermediates, obsolete protocols, a legacy TLS 1.0/1.1 acceptance probe, weak ciphers, weak keys, and SHA-1 signatures. Every finding ships with its remediation, deduplicates across scans, and auto-resolves when fixed.

Pro/Team editions (more hosts, Slack/Telegram, custom intervals, longer history): whop.com/nizar-tuanku/certlight-tls-monitor

Loading