Certificate Watch


(see the CertWatch website for a detailed description of the CertWatch Addon. Please ask questions at the CertWatch website; the Review facility below is for reviewing the addon only, not for support.)

When Firefox with CertWatch runs for the first time, CertWatch reads and records all available root certificates, in CertWatchDB3.sqlite (in your Firefox Profile directory). It can take up to 30 seconds to create the SQLite database.

When you visit a secure website (an 'https://' website), CertWatch informs you if the certificates have been encountered before or if there are new. New certificates for a website visited before is an indication that something needs careful examination.

You can specify in the Preferences whether you want notifications only for the first time a certificate is encountered, or more times.

In addition, CertWatch saves an entry for each HTTPS connection. Although we do not use this information yet, you can read the CertWatchDB3.sqlite database file (stored in your Profile folder) with your favorite SQLite editor and read the details. See SQlite Manager or run sudo apt-get install sqlitebrowser in Linux.

CertWatch is open-source software; it is a Firefox addon written in Javascript with no binary dependencies. A quick way to obtain the source code is to download the addon .xpi file and rename it to .zip. Then, you can open it with any ZIP archiver. To do so, locate the green button above with the caption “Add to Firefox” and right-click on it. Select ”Save Link As...” and save the file as certwatch-addon.zip. That's it!

CertWatch is internationalised, so you can start localising (translating) in your own language. Start translating CertWatch at the CertWatch Babelzilla page.

Download files:


This page is part of the LegacyCollector website.
Disclaimer: All material on this site is property of their respective owners and available under
open licenses to the best of our knowledge. If you are an author and would like anything removed,
then please write an e-mail to legacy [at] collector dot org.