Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.certforge.xyz/llms.txt

Use this file to discover all available pages before exploring further.

SMTP enables CertForge to send password resets, alert notifications, approval emails, and scheduled reports. Configure it in Admin → Settings → Notifications.

​
SMTP configuration

FieldDescriptionExample
HostSMTP server hostnamesmtp.sendgrid.net
PortSMTP port587 (STARTTLS) or 465 (TLS)
UsernameAuth usernameapikey
PasswordAuth password(API key or password)
From addressThe From: headernoreply@corp.com
To (admin alerts)Org-wide alert destinationops@corp.com, security@corp.com
TLSUse implicit TLSOff for STARTTLS (587), On for port 465
After saving, click Send Test Email to confirm.

SendGrid

Port 587, username apikey, password = API key. Generous free tier.

AWS SES

Port 587. Use SMTP credentials from IAM. Very low cost at volume.

Postmark

Port 587. Excellent deliverability for transactional email.

Office 365

Port 587, STARTTLS. Requires app password if MFA is enabled on the account.

​
What gets sent

EmailTrigger
Email verificationAccount registration
Password resetForgot password request
License & welcomeSelf-hosted license download
Alert notificationAlert rule fires
Approval submittedNew cert request enters queue
Approval outcomeRequest approved or rejected
Scheduled reportReport subscription fires (daily or weekly)

​
Alert subscriptions (personal)

Users can opt in to receive personal emails when specific alert rules fire:
  1. Go to Profile → Alert Subscriptions
  2. Check the alert rules to follow
  3. Save
Requires an email address on the account and SMTP configured.

​
Report subscriptions (scheduled)

Users can receive scheduled email reports:
  1. Go to Profile → Report Subscriptions
  2. Enable reports and choose daily or weekly delivery
  3. Save
Available reports: Certificate Inventory, Expiring Certificates (next 30 days), Approval Activity (last 30 days). The first delivery happens within an hour of enabling. Subsequent deliveries follow the selected schedule.

​
Email template customization

Default templates can be customized in Admin → Settings → Email Templates. Templates use Go’s text/template syntax. Available variables: 
{{.Email}}          — recipient email address
{{.OrgName}}        — organization name
{{.TrialDays}}      — trial duration in days
{{.DownloadURL}}    — binary download link
{{.SetPasswordURL}} — account activation link
Leave a template blank to use the built-in default.

​
Troubleshooting

Test email not received — Check spam folder. Verify the From address is authorized to send from your SMTP server (SPF/DKIM). Authentication failed — Verify username and password. For Gmail/Office 365, use an app-specific password rather than your account password. Connection refused — Check host and port. For port 587, TLS should be off (STARTTLS is negotiated after connection). For port 465, TLS should be on. Emails going to spam — Configure SPF, DKIM, and DMARC records for your From domain. Use a dedicated transactional email service rather than a personal mail server.