Certify The Web - Certify Certificate Manager

Request, install, manage, and automatically renew SSL/TLS certificates on Windows with Certify The Web - Certify Certificate Manager. It supports Let’s Encrypt and other ACME certificate authorities for IIS and other Windows services that require certificates.

The software can automate certificate requests and deploy certificates to IIS bindings. It handles single-domain, multi-domain SAN, and wildcard certificates, using HTTP or DNS challenges for validation. DNS validation can connect to more than 30 provider APIs or use the managed Certify DNS service. Supported authorities include Let’s Encrypt, Google Trust Services, ZeroSSL, Martini Security, and private ACME servers.

The package combines a desktop application with the Certify Management Agent Windows service and Certify CLI. The background agent manages renewals and certificate maintenance, while stored credentials are protected through the Windows Data Protection API. Pre-request and post-request tasks, scripting, and webhooks support deployments involving Exchange, RDS, CCS, Apache, nginx, Azure Key Vault, and Hashicorp Vault. It runs on 64-bit Windows versions currently supported by Microsoft, requires PowerShell 5.1 or later for deployment tasks and some DNS providers, and needs administrator rights to register its service. The self-contained application does not require a separate .NET runtime and can optionally connect to a self-hosted Certify Management Hub.