CERTIFICATE LIFECYCLE MANAGEMENT

Manage your SSL certificates in one place.

Get SSL certificates, install them on supported servers and services, and track renewals with Certinite. See where each certificate is used and which tasks need your attention.

Let's Encrypt and commercial SSL · Windows, Linux and API connections

CERTINITEEXAMPLE VIEW

Domains and installation details

Certificate inventory

Domain / systemStatus
  • www.example.comIIS · Agent
    Installed
  • api.example.comNginx · Gateway
    Renewal queued
  • *.example.netCommercial SSL · DNS
    Validation needed

WORKFLOW

Certificate installation steps

  1. Validate
  2. Issue
  3. 3Install
  4. 4Track
Sample data shown for illustration.
  • Certificates in one place
  • Free and commercial SSL
  • Install with Agent or Gateway
  • Installation and renewal tracking

CERTIFICATE MANAGEMENT, STEP BY STEP

Track every step, from installation to renewal.

See which domain a certificate covers, where it is installed and when it expires, all in the same dashboard.

Explore all features
  1. 01

    See your certificates in one place

    Review domains, issuing authorities, validity dates and installation details.

    Find certificates that are about to expire or still need validation.
  2. 02

    Choose the right certificate

    Choose a free Let's Encrypt certificate or a commercial SSL product that suits your needs.

    Compare single-domain, wildcard and multi-domain options in the commercial catalog.
  3. 03

    Choose how to install it

    Install your certificate using Agent, Gateway or a supported API connection.

    Check that your installation method supports both your server and your certificate type.
  4. 04

    Keep track of renewals

    Use automatic renewal where supported. Check completed tasks and any issues that need your attention in the dashboard.

    Renewals require a working connection, successful validation and the appropriate plan or account balance.

INSTALLATION OPTIONS

Connect to your servers with Agent or Gateway.

Install Agent on the server that will use the certificate, or use Gateway to reach several servers remotely.

Certinite dashboardCertificates · Orders · Installations
RUNS ON THE SERVER

Certinite Agent

Agent runs on your Windows or Linux server. It carries out the certificate installation and renewal tasks sent from your dashboard.

  • A separate Agent installation on each server
  • IIS and supported Linux web servers
  • Connection status and task tracking in the dashboard
Read the Agent setup guide
CONNECTS REMOTELY

Certinite Gateway

Gateway runs on a Windows machine and connects to the servers you authorize. It uses WinRM HTTPS for IIS and SSH for Linux servers.

  • Support for IIS, Nginx, Apache and HAProxy
  • Separate access and domain permissions for each server
  • Server credentials stored on the Gateway machine
Read the Gateway setup guide

Gateway currently installs single-domain certificates only. You can purchase wildcard and multi-domain (SAN) certificates, but Gateway cannot install them.

API connections for cloud services and network devices

Connect to supported cloud services, network devices and hosting control panels through their APIs. Validation and installation steps depend on the system you use.

See connection options

CERTIFICATE OPTIONS

Manage free and commercial SSL in one place.

Choose a certificate that meets your needs, then track your order, validation and installation from the same dashboard.

ACME01

Let's Encrypt

Get and renew Let's Encrypt certificates by validating your domain through HTTP or DNS.

  • Domain validation with HTTP-01 or DNS-01
  • Automatic validation with supported DNS providers
  • Free certificates; management depends on your plan
COMMERCIAL SSL02

Sectigo and GeoTrust

Choose from Sectigo and GeoTrust certificates offered through GoGetSSL. Track your order and validation status, then download your certificate files.

  • Single-domain and wildcard certificates
  • Multi-domain SSL and wildcard options
  • Validation and reissue options vary by product

SUPPORTED SYSTEMS

SSL management for your servers and cloud services.

Find a supported connection for your server or service. The documentation explains the permissions and setup steps you need.

AGENT / GATEWAY

Servers

  • Windows IIS
  • Nginx
  • Apache
  • Tomcat
  • IBM HTTP Server
  • HAProxy

Manage HAProxy certificates through Gateway, and Tomcat or IBM HTTP Server certificates through Agent.

API CONNECTIONS

Cloud services and network devices

  • AWS ACM
  • Google Cloud
  • Azure Key Vault
  • F5 BIG-IP
  • Citrix ADC
  • A10
  • FortiGate

The steps for importing and activating a certificate depend on the service or device.

BETA

Hosting control panels

  • cPanel / WHM
  • Plesk

cPanel/WHM and Plesk connections are in beta. Test them in your own environment before using them in production.

Read the setup documentation

FOR YOUR TEAM

Help your team stay on top of certificates.

IT and infrastructure teams

See which certificates your servers use and which ones need renewal. Track certificates that need attention from one dashboard.

Enterprise solutions

Agencies and MSPs

Track certificates, installations and renewals for client projects. Check completed tasks and outstanding steps in the dashboard.

MSP solutions

Development and operations teams

Choose a certificate, validate your domain and manage installation in one place when launching a new site or service.

Technical documentation

Know how your servers are accessed.

Agent and Gateway connect to Certinite over HTTPS. Domain validation and Gateway access to your servers are configured separately. Where private keys are stored depends on the certificate and installation method.

Read the security details

THE 2026–2029 SSL TIMELINE

Certificate lifetimes are getting shorter. Plan your renewals now.

Learn about the 200, 100 and 47-day validity limits, when they apply and Let's Encrypt's separate schedule. Our guide explains how to prepare for more frequent renewals.

Read the guide

SSL / TLS

Frequently asked questions

What does Certinite do?

Certinite lets you manage SSL/TLS certificates from one dashboard. You can get free or commercial certificates, install them on supported systems and track renewals. You can also check certificate validity dates and the status of each task.

What is the difference between Agent and Gateway?

Agent is installed on the server that uses the certificate and runs tasks there. Gateway connects to several servers remotely from a Windows machine. It uses WinRM HTTPS for IIS and SSH for Linux. Choose based on how you want to access your servers.

Can I buy wildcard and multi-domain SSL certificates?

Yes. You can buy wildcard, multi-domain and multi-domain wildcard certificates. However, not every installation method supports every product. Gateway, for example, currently installs single-domain certificates only.

Does every certificate renew automatically?

No. Automatic renewal depends on the certificate type, validation method, system and plan. Supported DNS providers can automate validation. With manual DNS validation, you may need to add a new DNS record yourself. Connection problems or insufficient balance can also stop a renewal.

If Let's Encrypt is free, what does Certinite provide?

Let's Encrypt certificates are free. Certinite helps you obtain them, install them on supported systems and manage renewals from one dashboard. You can also track certificate details and task status. Management features and pricing depend on your plan.

Where are private keys stored?

It depends on the certificate and validation method. Current Let's Encrypt and DNS validation processes may generate the key in Certinite's central system and send it to the server in a PFX file. For commercial certificates validated over HTTP, when the CSR (certificate signing request) is created on the server, the private key is generated there too. See the setup and security documentation for details.

GET STARTED WITH CERTINITE

Start managing your certificates today.

Create an account, choose a certificate and installation method, and complete your first setup step by step.