diff --git a/VERSION b/VERSION
index cb7afba..997fdeb 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.1.143
+1.1.144
diff --git a/cmd/edgeguard-api/main.go b/cmd/edgeguard-api/main.go
index 82530fb..7a4dd4c 100644
--- a/cmd/edgeguard-api/main.go
+++ b/cmd/edgeguard-api/main.go
@@ -60,7 +60,7 @@ import (
 	usersvc "git.netcell-it.de/projekte/edgeguard-native/internal/services/users"
 )
 
-var version = "1.1.143"
+var version = "1.1.144"
 
 func main() {
 	addr := os.Getenv("EDGEGUARD_API_ADDR")
diff --git a/cmd/edgeguard-ctl/main.go b/cmd/edgeguard-ctl/main.go
index edf3a96..45149ab 100644
--- a/cmd/edgeguard-ctl/main.go
+++ b/cmd/edgeguard-ctl/main.go
@@ -11,7 +11,7 @@ import (
 	"git.netcell-it.de/projekte/edgeguard-native/internal/services/setup"
 )
 
-var version = "1.1.143"
+var version = "1.1.144"
 
 const usage = `edgeguard-ctl — EdgeGuard CLI
 
diff --git a/cmd/edgeguard-scheduler/main.go b/cmd/edgeguard-scheduler/main.go
index 0746abe..5daff93 100644
--- a/cmd/edgeguard-scheduler/main.go
+++ b/cmd/edgeguard-scheduler/main.go
@@ -41,7 +41,7 @@ import (
 	"git.netcell-it.de/projekte/edgeguard-native/internal/services/tlscerts"
 )
 
-var version = "1.1.143"
+var version = "1.1.144"
 
 const (
 	// renewTickInterval — how often we re-evaluate expiring certs.
diff --git a/management-ui/src/pages/Domains/Detail.tsx b/management-ui/src/pages/Domains/Detail.tsx
index b47d02f..b351446 100644
--- a/management-ui/src/pages/Domains/Detail.tsx
+++ b/management-ui/src/pages/Domains/Detail.tsx
@@ -62,6 +62,7 @@ interface TLSCertLite {
   domain: string
   status: 'pending' | 'active' | 'renewing' | 'expired' | 'error'
   not_after?: string | null
+  last_error?: string | null
 }
 
 interface HAProxyStat { backend: string; server: string; status: string }
@@ -165,8 +166,16 @@ export default function DomainDetailPage() {
 
   const certBadge = () => {
     if (!cert) return <Tag icon={<LockOutlined />} color="default">{t('domains.tlsCertNone')}</Tag>
-    if (cert.status === 'expired') return <Tag icon={<LockOutlined />} color="red">{t('domains.tlsCertExpired')}</Tag>
-    if (cert.status === 'error') return <Tag icon={<LockOutlined />} color="red">{t('domains.tlsCertError')}</Tag>
+    if (cert.status === 'expired') return (
+      <Tooltip title={cert.last_error ?? cert.not_after}>
+        <Tag icon={<LockOutlined />} color="red">{t('domains.tlsCertExpired')}</Tag>
+      </Tooltip>
+    )
+    if (cert.status === 'error') return (
+      <Tooltip title={cert.last_error}>
+        <Tag icon={<LockOutlined />} color="red">{t('domains.tlsCertError')}</Tag>
+      </Tooltip>
+    )
     const days = cert.not_after
       ? Math.round((new Date(cert.not_after).getTime() - Date.now()) / 86_400_000)
       : null