The TLS/SSL Certificate Management GUI for Windows, powered by Let's Encrypt and other ACME certificate authorities. This app makes it easy to automatically request, install and continuously renew free certificates for Windows/IIS or for any other services which requires a domain certificate.
- Home page for downloads, info and support : https://certifytheweb.com/
- Documentation: https://docs.certifytheweb.com
- Community Discussions: https://community.certifytheweb.com
- Changelog (release notes): https://certifytheweb.com/home/changelog
Certify The Web is used by hundreds of thousands of organisations to manage millions of certificates each month and is the perfect solution for administrators who want visibility of certificate management for their domains. Centralised dashboard status reporting is also available.
- See more details: https://certifytheweb.com/home/features
- Easy certificate requests & automated SSL bindings (IIS)
- Fetch certificates from ACME Certificate Authorities including Let's Encrypt, BuyPass Go and ZeroSSL
- Works with private ACME CA servers including DigiCert, smallstep, Keyon true-Xtender etc.
- Automatic renewal using a background service, with configurable renewal frequency.
- Preview mode to see which actions the app will perform (including which bindings will be added/updated)
- SAN support (multi-domain certificates)
- Single domains, multiple-domains (SAN) and wildcard certificates (*.example.com)
- Http or DNS challenge validation.
- Built-in Http Challenge Server for easier configuration of challenge responses
- DNS Validation via over 26 supported APIs (including Azure DNS, Alibaba Cloud, AWS Route53, Cloudflare, DnsMadeEasy, GoDaddy, OVH, SimpleDNSPlus). Some providers are implemented via the Posh-ACME project
- Support for the Certify DNS cloud managed dns challenge validation service, allowing DNS validation via any DNS provider.
- Multiple authorizations supported, allowing a mix of domain validation settings per managed certificate
- Stored Credentials (API access keys etc. protected by the Windows Data Protection API)
- Optional pre/post request Deployment Tasks and scripting for advanced deployment (Exchange, RDS, multi-server, CCS, Apache, nginx, export, webhooks, Azure KeyVault etc)
The Community edition is free, license keys are available for commercial organisations, users who wish to help fund development or users who require support.
- Windows Server 2012 R2 or higher (.Net 4.6.2 or higher), 64-bit
- PowerShell 5.1 or higher (for functionality like Deployment Tasks and some DNS providers).
- Download from https://certifytheweb.com/ and install it. Chocolatey users can alternatively
choco install certifytheweb. - Click 'New Certificate', optionally choose your IIS site (binding hostnames will be auto detected, or just enter them manually). Save your settings and click 'Request Certificate'
- All done! The certificate will renew automatically.
Users with more complex requirements can explore the different validation modes, deployment modes and other advanced options.