Reading the dashboard
What each card, chart, and status on the dashboard means, and how to use them to triage problems fast.
The dashboard is designed so that a glance tells you whether everything is fine or something needs your attention. Here’s how to read it.
The health percentage
The big number at the top is the share of your monitored endpoints that are healthy. Color tells you the story:
- Green — everything is healthy or within normal expiry windows.
- Yellow — at least one endpoint has a certificate expiring soon or a warning you should look at.
- Red — at least one endpoint has a revoked certificate, a failed chain, or an installation error.
Red means “you probably want to click in and fix something today.”
The summary cards
The top row of cards gives you a count of endpoints by status:
- Monitored — total endpoints CertShield is watching.
- Healthy — valid certificate, trusted chain, and more than 30 days until expiry.
- Expiring — valid today, but running out of runway.
- Install errors — CertShield can reach the endpoint but something about the certificate installation is wrong (bad chain, wrong hostname, etc.).
Additional cards show up if you have them:
- Revoked — the Certificate Authority has explicitly revoked the certificate. Browsers will reject the connection. Fix this now.
- Unknown issuer — the certificate was issued by a Certificate Authority you haven’t explicitly authorized for this domain. Could be benign, could be a compromise. See Unauthorized issuer alerts.
Clicking any card filters the endpoints list for that status.
The expiry heatmap
A 28-day grid showing every day’s expiring certificates. Darker cells mean more certs expire that day. This is usually where team leads look first — it lets you spot clusters of renewals and plan ahead.
Top expiring endpoints
A small table of the five endpoints closest to expiry. Days-remaining is the actionable number. Click any row to jump straight to the endpoint’s detail page.
Recent activity
The last few events across your whole account — new certificates discovered, certificates changing, alerts sent, and delivery failures. This is a quick “what happened lately?” pane. The full history lives on the Activity Log page in the app.
Domain health
A second row showing the health of your domains (as opposed to endpoints). A domain is unhealthy if its last scan failed, if one of its live endpoints is unreachable, or if an unauthorized certificate was just issued for it.
Refreshing
The dashboard refreshes automatically when you bring the tab back into focus. You don’t need to manually reload after fixing something — come back to the tab and the numbers update.