SaQura CertWatch

Check certificates, keep watch

Only for iPhone

Free · In‑App Purchases · Designed for iPhone. Not verified for macOS.

iPhone

Will your certificate expire while you happen to be looking elsewhere? SaQura CertWatch checks an address the way a browser would — and tells you where you stand in a single letter. Check Type a domain and the app opens the connection itself: you see what your server actually serves, not what the configuration says it should. Remaining validity, chain of trust, negotiated protocol, key, signature and revocation status — every card with a traffic light, and a grade from A to F above them. Open the grade and you read, in plain words, why it came out that way. New in this version: the certificate in full detail, the negotiated cipher suite, Certificate Transparency (is the certificate logged?) and your domain's CAA record. Plus "What to do" — one concrete next step for every finding, offline, without an account. Plus a question almost nobody asks: did your server choose a quantum-safe key exchange? The app shows what it actually settled on — and the watch filters on exactly that answer. Watch Up to three addresses stay under watch. The app re-checks them when you open it and in the background. The reminders follow the lifetime of each individual certificate: for a year, 30, 14, 7 and one day ahead; for 90 days, 21, 10, 5 and one; for shorter ones, 14, 7, 3 and one. Certificates keep getting shorter — the app works this out per address and tells you how often a year you will have to renew. No connection? Then the last known state is there, with its time, and the app tells you when it will try again. Where you are looking anyway A widget for the home and lock screen shows the next expiry. If you want it, a countdown runs along as a Live Activity. And as a shortcut you check one address, or the whole watch, without opening the app. Event log Every check, every change, every scheduled reminder and every error goes into a running log. Each entry carries the checksum of the one before it, so changing something after the fact breaks the chain visibly. One tap and you verify that yourself; one more and you export the lot. When three addresses are not enough "Extend the watch" raises the list to 25 addresses, once. One purchase, nothing recurring. CertWatch Pro Up to 100 addresses on the watch, a grade history per address, an alert to your own webhook address when a grade drops, and mail servers checked too: SMTP and IMAP with STARTTLS. $4.99 a month or $49.99 a year, the first week free. When the subscription ends your data and your list stay — the list simply stops growing. What the app does not do No account. No sign-in. No usage statistics, no advertising identifier, no third-party libraries. Your addresses stay on the device. Switch on iCloud sync and they also live in your private iCloud and on your other devices with the same Apple Account — no account with us for that either. It stays off until you switch it on. The check itself obviously goes out, but it goes straight to the server you typed. An error report is sent only when you send it — and you see its contents first. And when this is your job Anyone answerable to clients wants daily watching, email warnings and reports they can hand over and have verified. That is SaQura CertWatch on your own server: saqura.org/certwatch KyotoTech LLC, Kyoto. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://saqura.org/certwatch/app

  • This app hasn’t received enough ratings or reviews to display an overview.

Text sizes now follow the text size set in the system settings. Certificate chain: the grade is based on the chain the server actually sends. If only an intermediate certificate is missing, the grade is C with the reason "Intermediate missing" instead of F. Japanese texts: punctuation, separators and line breaks revised.

The developer, KyotoTech LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Linked to You

    The following data may be collected but it is not linked to your identity:

    • Diagnostics

Privacy practices may vary, for example, based on the features you use or your age. Learn More

The developer has not yet indicated which accessibility features this app supports. Learn More

Seller
KyotoTech LLC
Size
2.6 MB
Category
Utilities
Compatibility
Requires iOS 17.0 or later.
  • iPhone
    Requires iOS 17.0 or later.
  • Mac
    Requires macOS 14.0 or later and a Mac with Apple M1 chip or later.
  • Apple Vision
    Requires visionOS 1.0 or later.
Languages
English and 2 more
  • English, German, Japanese
Age Rating
4+
In-App Purchases
Yes
  • CertWatch Pro $49.99
  • CertWatch Pro $4.99
  • Extend the watch $3.99
Copyright
© 2026 KyotoTech LLC