shiichan

No More Certificate Alert Noise! Certificate Transparency Monitoring Reaches GA

Hey everyone, it's Shiichan! Today I've got a Cloudflare update about certificate alerts for you.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Cloudflare's Changelog announced that Certificate Transparency Monitoring is now generally available across all Cloudflare plans. It's a system that alerts you when a new certificate is issued for your domain, helping you catch unauthorized certificate issuance early.

What changes

The headline change is that certificates Cloudflare issues on your behalf are now automatically filtered out before an alert is sent. That includes:

  • Universal SSL renewals
  • Backup certificates
  • Advanced Certificate Manager certificates
  • Total TLS certificates

Previously, these routine renewals generated alerts too, which made it easy for genuinely concerning notifications to get lost in the noise. Filtering them out means the alerts you do get are worth paying attention to.

The alert emails themselves got clearer as well. They now include structured certificate details and a direct link to manage CT Monitoring in the Cloudflare dashboard.

Dive Deep

You can turn this on from the Cloudflare dashboard under SSL/TLS → Edge Certificates → Certificate Transparency Monitoring. It's available on every plan at no extra cost.

Wrap-up

  • Certificate Transparency Monitoring is now GA on every plan
  • Certificates Cloudflare issues (Universal SSL renewals, backup certificates, Advanced Certificate Manager, Total TLS) are now filtered out of alerts automatically
  • Alert emails now include structured certificate details and a dashboard link
  • Manage it from SSL/TLS → Edge Certificates in the dashboard

If you run certificates on Cloudflare and have been mildly annoyed by alert noise, this one's for you!