If you sign up for one of these cert monitoring services, I’d suggest testing whether it can catch: - Change in root - Change in stapling - Downgrade from EV

If you sign up for one of these cert monitoring services, I’d suggest testing whether it can catch: - Change in root - Change in stapling - Downgrade from EV > OV > DV The last point is really about the now-proactive choice against automation. Those who are operating manually: what monitoring do you choose? Does your EV or OV come with a monitoring service?