Certificate Monitoring

What certificate monitoring is

Certificate monitoring watches a domain for matching certificates and can notify a webhook when a certificate meets conditions you set.

Organization monitoring can also show certificates on a domain link. Use this when you want the watch on its own.

POST/v3/cert-monitoring

Watch a domain

API reference

Request fields

Field	Notes
`domain`	Domain to watch
`notifications`	Optional callback configuration

notifications fields:

Field	Notes
`enabled`	Turn delivery on
`callback_id`	Required when `enabled` is true. A webhook id
`conditions`	Which certificates qualify
`delivery_mode`	`immediate` (default), `hourly`, `daily`, `weekly`, or `monthly`
`digest_hour`	0–23. Used by daily, weekly, and monthly delivery
`digest_weekday`	0–6, Sunday is 0. Used by weekly delivery
`digest_day`	1–31. Used by monthly delivery. Shorter months use the last day
`max_events_per_delivery`	Cap on events in one delivery
`state`	`seeding`, `active`, or `paused`

This callback_id is the subscription's own webhook. It is not filled from preferences and it is not a job callback.

A new subscription stays in seeding while historic certificates are loaded from crt.sh and ctlogs.dev, then moves to active. If both sources stay unavailable, seeding still ends after 6 hours. Names already seen stay quiet. Names that show up after that can notify. callback_id is required only when enabled is true.

curl -sS -X POST "https://api.efflux.io/v3/cert-monitoring" \
  -H "Authorization: Bearer $EFFLUX_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "domain": "example.com",
    "notifications": {
      "enabled": true,
      "callback_id": "whook_abc123",
      "delivery_mode": "daily",
      "digest_hour": 8
    }
  }'