Certify The Web

Professional ACME (Let's Encrypt, Google Trust etc) certificate management. Supported by @webprofusion

Discussions:

[Certify The Web @certifytheweb]

Certify Certificate Manager and Certify Management Hub have reached general release with v7.1.0

https://t.co/tljFFHCd85

Existing users are encouraged to explore the new hub product - just download and try out! It's especially useful if you have many CCM instances to manage.

[Certify The Web @certifytheweb]

Users upgrading are advised to test their workloads, especially powershell. This is a big update!

[Certify The Web @certifytheweb]

Certify Certificate Manager and Certify Management Hub have reached general release with v7.1.0

https://t.co/tljFFHCd85

Existing users are encouraged to explore the new hub product - just download and try out! It's especially useful if you have many CCM instances to manage.

[Certify The Web @certifytheweb]

@richardhicks It depends which product you are trying to use, if you can install it then technically yes it can be used headless when joined to Certify Management Hub.

The trick is getting it to join the hub without the UI, but it can be done from the CLI. Haven't tried it recently on core.

[Certify The Web @certifytheweb]

Reminder that Let's Encrypt now no longer issue certs with "client authentication" enabled by default.

https://t.co/KEulA3GSln

This mainly concerns machine-to-machine authentication using certs and does not affect most users.

[Certify The Web @certifytheweb]

Note that there are potential issues to consider with using the new Let's Encrypt "Generation Y" chain on Windows Servers (e.g. trusting the roots before your clients do).

https://t.co/DAiIgXwO2i

[Certify The Web @certifytheweb]

"This worked PERFECTLY.  Thanks so much.  Again, your application and team are amazing."

Thanks, you're great too.

[Certify The Web @certifytheweb]

The docker version of our new Certify Management Hub product has had more than 50,000 image pulls:

https://t.co/HbnERKbq0l

Give it a try, feedback is very welcome!

[Certify The Web @certifytheweb]

The release candidate for v7.x of our product suite is out now:
- Certify Management Hub (Windows, Docker, Linux, macOS)
- Certify Certificate Manager (Windows)
- Certify Management Agent (Docker, Linux, macOS)

https://t.co/TSRzTbvKYZ

[Certify The Web @certifytheweb]

Resolved: https://t.co/2ah2xDvSqe

[Certify The Web @certifytheweb]

We are aware of a potential issue caused by a recent Windows Update which stops the app UI talking to it's background service API. We are currently investigating the cause and fix.

[Certify The Web @certifytheweb]

Solution is to install the very latest Windows Defender definitions (Version 1.439.216.0 or higher), which can require manual update and reboot.

[Certify The Web @certifytheweb]

We are tracking this "Service Not Started" issue regarding a broken windows update on our community forum https://t.co/2ah2xDvSqe

[Certify The Web @certifytheweb]

We are aware of a potential issue caused by a recent Windows Update which stops the app UI talking to it's background service API. We are currently investigating the cause and fix.

[Certify The Web @certifytheweb]

BuyPass have announced they are terminating their free ACME services in October. If you are using their service you should begin migration now.

https://t.co/NkkG2spZpK

Let's Encrypt and Google Trust Service are some of our suggested alternatives.

[Christopher Cook @webprofusion]

Just solved ACME challenges for all standard ACME certificate clients you might find in an organization.

No more public HTTP ports, no more DNS credentials littered around, admin says who gets a cert and who doesn't.

Soon to Certify Management Hub: https://t.co/6XvHeNx4D5

[Certify The Web @certifytheweb]

You can use v7.x onwards of our apps to get IP address certificates where supported by the CA.

Let's Encrypt currently have this feature planned and it's available though their staging API using the "shortlived" ACME profile.

https://t.co/AEPpRMDYb4

[Certify The Web @certifytheweb]

Certify Management Hub v7.0.2 (alpha 8) is out now for Linux, Windows and docker/containers. https://t.co/sGJF4PWGo7

Centralized certificate management, optionally with distributed management agents (linux & windows).

[Certify The Web @certifytheweb]

If you get an error like "The CA ACME directory was not accessible" your machine is failing to talk to the Let's Encrypt API, here's how to fix it!

[Certify The Web @certifytheweb]

If you suddenly have trouble talking to Let's Encrypt from an older (or upgraded) version of Windows using tools like Certify The Web or win-acme etc, see this:

https://t.co/kaLzcY8gex

[Certify The Web @certifytheweb]

Reminder that if you are using your certs for Client authentication (sometimes used as authentication for machines talking to machines) that feature is being removed from most ACME CA certs.

[Certify The Web @certifytheweb]

Let's Encrypt are discontinuing client certificates in 2026 - these are the ones you might use to authenticate a client (app etc) to a server, not traditional web server certs.

https://t.co/KaE4o6FTDh

[Certify The Web @certifytheweb]

We are seeing a surge in reports of problems with the ZeroSSL ACME API. https://t.co/j318yIBCIj

Keep in mind that if you have multiple CA accounts configures the app can automatically fallback to a different CA: https://t.co/jjdlxvNSWF

[Certify The Web @certifytheweb]

If you suddenly have trouble talking to Let's Encrypt from an older (or upgraded) version of Windows using tools like Certify The Web or win-acme etc, see this:

https://t.co/kaLzcY8gex