SaQura CertWatch
Check certificates, keep watch
Only for iPhone
Free · In‑App Purchases · Designed for iPhone. Not verified for macOS.
iPhone
Will your certificate expire while you happen to be looking elsewhere?
SaQura CertWatch checks an address the way a browser would — and tells you
where you stand in a single letter.
Check
Type a domain and the app opens the connection itself: you see what your server
actually serves, not what the configuration says it should. Remaining validity,
chain of trust, negotiated protocol, key, signature and revocation status —
every card with a traffic light, and a grade from A to F above them. Open the
grade and you read, in plain words, why it came out that way.
New in this version: the certificate in full detail, the negotiated cipher
suite, Certificate Transparency (is the certificate logged?) and your domain's
CAA record. Plus "What to do" — one concrete next step for every finding,
offline, without an account.
Plus a question almost nobody asks: did your server choose a quantum-safe key
exchange? The app shows what it actually settled on — and the watch filters on
exactly that answer.
Watch
Up to three addresses stay under watch. The app re-checks them when you open it
and in the background. The reminders follow the lifetime of each individual
certificate: for a year, 30, 14, 7 and one day ahead; for 90 days, 21, 10, 5
and one; for shorter ones, 14, 7, 3 and one. Certificates keep getting shorter
— the app works this out per address and tells you how often a year you will
have to renew. No connection? Then the last known state is there, with its
time, and the app tells you when it will try again.
Where you are looking anyway
A widget for the home and lock screen shows the next expiry. If you want it, a
countdown runs along as a Live Activity. And as a shortcut you check one
address, or the whole watch, without opening the app.
Event log
Every check, every change, every scheduled reminder and every error goes into a
running log. Each entry carries the checksum of the one before it, so changing
something after the fact breaks the chain visibly. One tap and you verify that
yourself; one more and you export the lot.
When three addresses are not enough
"Extend the watch" raises the list to 25 addresses, once. One purchase, nothing
recurring.
CertWatch Pro
Up to 100 addresses on the watch, a grade history per address, an alert to your
own webhook address when a grade drops, and mail servers checked too: SMTP and
IMAP with STARTTLS. $4.99 a month or $49.99 a year, the first week free. When
the subscription ends your data and your list stay — the list simply stops
growing.
What the app does not do
No account. No sign-in. No usage statistics, no advertising identifier, no
third-party libraries. Your addresses stay on the device. Switch on iCloud sync
and they also live in your private iCloud and on your other devices with the
same Apple Account — no account with us for that either. It stays off until you
switch it on. The check itself obviously goes out, but it goes straight to the
server you typed. An error report is sent only when you send it — and you see
its contents first.
And when this is your job
Anyone answerable to clients wants daily watching, email warnings and reports
they can hand over and have verified. That is SaQura CertWatch on your own
server: saqura.org/certwatch
KyotoTech LLC, Kyoto.
Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Privacy Policy: https://saqura.org/certwatch/app
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
Text sizes now follow the text size set in the system settings.
Certificate chain: the grade is based on the chain the server actually sends. If only an intermediate certificate is missing, the grade is C with the reason "Intermediate missing" instead of F.
Japanese texts: punctuation, separators and line breaks revised.
The developer, KyotoTech LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Linked to You
The following data may be collected but it is not linked to your identity:
- Diagnostics
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- KyotoTech LLC
- Size
- 2.6 MB
- Category
- Utilities
- Compatibility
Requires iOS 17.0 or later.
- iPhone
Requires iOS 17.0 or later. - Mac
Requires macOS 14.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
English and 2 more
- English, German, Japanese
- Age Rating
4+
- 4+
- In-App Purchases
Yes
- CertWatch Pro $49.99
- CertWatch Pro $4.99
- Extend the watch $3.99
- Copyright
- © 2026 KyotoTech LLC
