CERT
OPS · Coming soon
v1.0.0 · macOS

CERT

Certificates, domains and DNS, never a surprise.

Every team has a story about the certificate nobody renewed. CERT keeps the dates in front of you, verifies every chain properly, and tells a registration it could not read from one that is fine.

Launch price−43%
€3.99€6.99
Coming to Elgato Marketplace

The listing is on its way; this button becomes a link the moment Elgato publishes it.

Or all seven tools in the OPS Suite, €12.99 instead of €24.99. See the OPS Suite →

CERT keys on a Stream Deck
The keys

Every key has one job.

Put the ones you need where you need them. Each key draws what it knows, live, in the same language as every other OPS key.

CERT Core: Overall health, counts and the nearest deadline.
CERT Core
Overall health, counts and the nearest deadline.
Certificate Watch: One verified certificate: expiry, chain and hostname.
Certificate Watch
One verified certificate: expiry, chain and hostname.
Domain Watch: One domain registration expiry from RDAP.
Domain Watch
One domain registration expiry from RDAP.
DNS Watch: Records, expectations and changes against a baseline.
DNS Watch
Records, expectations and changes against a baseline.
Expiry Watch: The Expiry Radar: every deadline, nearest first.
Expiry Watch
The Expiry Radar: every deadline, nearest first.
Incident Watch: Open problems, worst first.
Incident Watch
Open problems, worst first.
Check Now: An immediate check of everything or one target.
Check Now
An immediate check of everything or one target.
Group Watch: A client, project or environment group.
Group Watch
A client, project or environment group.
Why it is different
Verified, never relaxed
01

Verified, never relaxed

A normal TLS handshake with verification on. Expired, wrong-host and untrusted certificates are named by their error, and dates are never invented.

Registrations from the registry
02

Registrations from the registry

Domain expiry comes from RDAP, the registries' own data. Unknown stays unknown.

Changes noticed
03

Changes noticed

A new certificate fingerprint or a changed DNS record against its baseline is recorded and shown.

Built to be trusted

One family, one language, no cloud.

One language

Green healthy, amber attention, red critical, grey unknown: the same header, marks and colours on every key of all seven tools, always with a shape and a word.

Evidence, not optimism

Unknown is never painted green. A launch is not a session, a reachable disk is not a valid backup, an open port is not a working API.

Local and private

No account, no cloud service, no telemetry, no subscription. Checks run from your Mac, and history stays on it.

Requirements

Stream Deck app
7.6 or newer
macOS
12 or newer. OPS is not available for Windows.
Stream Deck
Any model with keys
Permissions
No permission needed. Reads public TLS, DNS and RDAP data; never changes your infrastructure.

Privacy

Everything runs on your Mac: checks, history and settings. There is no account, no analytics and no 7bp server in between; the only traffic is the checks you configure.

Version

v1.0.0

First release: CERT Core, Certificate, Domain, DNS, Expiry, Incident, Check Now and Group Watch, on the OPS design.

Support

Something not as it should be? Write to us and include:

  • Your macOS and Stream Deck app versions
  • Which key, and what it shows
  • What you expected it to show
Email support
More keys

The rest of the line-up

  • OPS Suite
  • Overhead
  • Approach
  • Tickwork
  • Pipling
  • Terrarium
  • Fathom
  • Meter
  • Quorum
  • Psst
  • Browser
  • Windows
  • Gato Run
  • Lucky Deck
  • Daybar
  • Bonsai
  • Signals
  • Iris
  • Cams
  • Tradewind
  • Inwords
  • Peek
  • Butterfingers
  • Keyhaven
  • Royal Deck
  • Meridian
  • PandaBreak
  • Deck Radar
  • QuotaPulse
  • Wrangler
  • PULSE
  • UPTIME
  • SPEED
  • ACCESS
  • PROBE
  • VAULT
All plugins →