Question 1

How does DNS change monitoring work?

Accepted Answer

CertSentry takes a snapshot of your domain's DNS — A, AAAA, CNAME, MX, NS and TXT records — and tells you when it changes. That single feature catches a surprising range of incidents: an accidental edit in the DNS console, an expired delegation or a registrar that reset your nameservers, a hijack or…

Question 2

Does CertSentry watch domain (registration) expiry?

Accepted Answer

Yes. Separately from the certificate, CertSentry tracks when your domain registration expires, using RDAP (with WHOIS as a fallback). A lapsed domain is one of the most painful outages there is — site and email go dark at once, and recovery through a registrar can be slow — so it's worth a warning w…

DNS & domains

DNS & domains