pkiguy/certify

SSL Certificate Manager UI for Windows, powered by Let's Encrypt

Certify The Web - SSL Manager UI for Windows

• Home page for downloads and info : https://certifytheweb.com/
• Docs covering v4 onwards can be found at: https://docs.certifytheweb.com
• Community Discussions: https://community.certifytheweb.com

The SSL/TLS Certificate Management GUI for Windows, powered by Let's Encrypt, allowing you to generate and install free SSL certificates for Windows/IIS (with automated renewal).

Requirements:

• Windows Server 2008 R2 SP1 or higher (.Net 4.6.2 or higher), 64-bit

Features:

• Easy certificate requests & automated SSL bindings
• Preview mode to see which actions the app will perform (which bindings will be added/updated)
• Auto renewal using background service, with configurable renewal frequency
• SAN support (multi-domain certificates)
• Support for v2 of the Let's Encrypt API including Wildcard Certificate support (*.example.com)
• Optional Pre/Post request powershell scripting for advanced deployment (Exchange, RDS, multi-server etc)
• Web Hook support for custom reporting.
• Http or DNS challenge validation.
  • Built-in Http Challenge Server for easier configuration of challenge responses
  • DNS Validation via supported APIs (including Azure DNS, Alibaba Cloud, AWS Route53, Cloudflare, DnsMadeEasy, GoDaddy), OVH, SimpleDNSPlus
• Stored Credentials (API access keys etc. protected by the Windows Data Protection API)

---

Quick Start (IIS users)

1. Download from https://certifytheweb.com/ and install it.
2. Click 'New Certificate', choose your IIS site (binding hostnames will be auto detected). Save your settings and click 'Request Certificate'
3. All done! The certificate will renew automatically.

Advanced users can explore the different validation modes, deployment modes and other advanced options.

Development & Bug Reporting

If you have a bug or feature and you can fix the problem yourself please just:

1. File a new issue
2. Fork the repository
3. Make your changes
4. Submit a pull request, detailing the problem being solved and testing steps/evidence

If you cannot provide a fix for the problem yourself, please file an issue and describe the fault with steps to reproduce.

Translation

You can help translate the app by cloning the repo and installing ResXManager to easily update translation text: https://marketplace.visualstudio.com/items?itemName=TomEnglert.ResXManager

Developer Build/Run Requirements:

• Visual Studio 2017 Community Edition (or higher)
• A local instance of IIS installed (for http validation, not required for DNS validation).
• To build the current release version use the release branch: https://github.com/webprofusion/certify/tree/release, development is the current work in progress.
• Restoring NuGet packages using "Update-Package -reinstall" can be useful where nuget restore fails.
• The app needs to run as Administrator, otherwise it cannot access IIS, write to the IIS website root paths or manage the windows certificate store.
• The UI needs the background service to be running. You can configure Visual Studio to launch both the Certify.UI project and the Certify.Service project via Solution > Properties > Multiple Startup Projects

Note: For development you will require a publicly accessible IP mapped to the domain/subdomain you want to test with. The Let's Encrypt service will need to be able to access your test site remotely via HTTP in order to complete authorisation challenges. The app consists of a UI and background service. The background service must be running for the UI to operate.

apps {at} webprofusion.com