TLS certificate-expiry watch

An expired certificate takes the whole site down as surely as defacement. The Homepage watch toggle (Pro, under the hardening settings) already checked the live homepage on every scheduled check for downtime, defacement, and SEO-spam injection — it now also reads the site's TLS certificate expiry and alerts when it enters the 14-day renewal window.

Alert discipline

Like the rest of the watch, certificate alerts fire by email only when something actually changes — entering the window, leaving it (renewed), plus the existing down/back-up and defacement transitions — never a nag on every single check. The Settings panel shows the current "expires in N days" status between checks.

Joomla 3

Identical on the Joomla 3 edition (v2.3.0): same 14-day window, same change-only emails.