SSL Certificate Auto-Renewal Status Badge

WHAT IT DOES

This script scans SSL certificate management pages (cPanel SSL/TLS, Let's Encrypt, Cloudflare, certificate dashboards) for certificate expiration dates and auto-renewal status indicators. It displays a floating badge panel showing each detected certificate with days until expiration, color-coded urgency (green >30 days, yellow 7-30 days, orange 1-7 days, red expired/0 days), and auto-renewal status (Enabled/Disabled/Unknown). The panel detects renewal failure warnings and provides quick visual alerts when certificates are approaching expiration. Users can view renewal history per domain, set custom reminders, and export all certificate data as CSV. All expiration dates and renewal statuses are stored locally per domain for persistent tracking across visits.

WHERE IT RUNS

Works on any SSL certificate management page—cPanel SSL/TLS manager, Let's Encrypt dashboards, Cloudflare SSL/TLS settings, certificate authority portals, or any page displaying SSL certificate information. The script scans page content for expiration dates and renewal indicators regardless of the specific layout, making it compatible with most certificate management interfaces.

HOW TO USE

The panel appears automatically when you visit a certificate management page. It detects certificates and displays them with color-coded urgency badges showing days remaining. Each certificate card shows the certificate name, expiration date, auto-renewal status (Enabled/Disabled/Unknown), and any renewal warnings. The "History" section shows the last 10 renewal checks for the current domain. Toggle "Enable Notifications" to receive browser notifications when a certificate is expiring within 7 days. Click "Export CSV" to download all stored certificate records including domain, expiration date, auto-renewal status, and last checked date. Use "Clear Records" to remove all stored certificate data.

TECHNICAL MECHANISM: MULTI-PASS CERTIFICATE DETECTION WITH CONTEXTUAL PARSING AND HISTORY TRACKING

The script uses a comprehensive detection strategy. First, it scans the page for SSL/TLS-related containers by checking elements for keywords like 'certificate', 'ssl', 'tls', 'expires', 'valid', and 'renew'. It then extracts domain names using a domain regex pattern, expiration dates using multiple date format parsers (MM/DD/YYYY, YYYY-MM-DD, Month DD, YYYY), and auto-renewal status by looking for phrases like 'auto-renew enabled', 'renewal enabled', or 'disabled'. It also detects renewal failure warnings by scanning for terms like 'failed', 'failure', 'error', 'invalid', and 'unable to renew'. Certificate names are extracted from common patterns like 'Certificate name:', 'Common name:', or 'Issuer:'. When a certificate is detected, the script updates stored records for that domain, adding the expiration date and renewal status. A history array is maintained for each domain, storing up to 20 entries with timestamps and statuses. Notifications are triggered when the expiration date is within 7 days, using GM_notification. The script also attempts to detect certificates even when no explicit certificate container is found by scanning the page body for expiration date patterns and associating them with the current domain.

THE PANEL

The SSL certificate monitor appears in a draggable, resizable panel that remembers its position per site. The panel lists each certificate with its urgency badge, expiration date, and auto-renewal status. The history section shows recent renewal checks. Drag by the header to reposition, collapse to a compact icon with a click, and resize using the bottom-right corner. The panel snaps to screen edges for tidy placement and closes with the Escape key. All settings—notification preference and panel position—persist per website using GM_setValue, so your view returns exactly as you left it.

PLEASE NOTE

This script requires the free BotGentz extension to run. Certificate detection relies on the page displaying expiration dates and renewal status in a parsable format—some certificate dashboards may use non-standard layouts that prevent automatic detection. The script does not access your SSL certificate data beyond what is visible on the page. All data is stored locally in your browser via GM_setValue and never transmitted. The script can only detect certificates that are displayed on the current page; if your certificate management page uses pagination or lazy loading, you may need to navigate to the relevant page. Notifications require the GM_notification grant and will only appear when the panel is closed or the page is in the background.