Skip to content
SPECIFICTION
Get listed

Certify The Web

certifytheweb.com

From $4.92/mo Free plan WebWindowsmacOSLinuxAPISelf-hosted
Visit certifytheweb.com
Spec score 9.4 #1 of 31 in Certificate Management Software

What it is

Certify The Web provides products for requesting, deploying, and renewing TLS certificates. Certificate Manager is intended for Windows servers or desktops, Management Agent for headless Linux and macOS systems, and Management Hub for central administration of multiple instances. The tools support ACME authorities including Let's Encrypt, Google Trust Services, ZeroSSL, Actalis, and private or enterprise CAs. Domain checks can use HTTP or DNS, with options ranging from built-in providers and Certify DNS to manual TXT records or custom scripts. Deployment tasks cover IIS, Apache, nginx, Tomcat, Exchange, ADFS, RDP, Azure App Service, Azure Key Vault, HashiCorp Vault, and IIS Centralized Certificate Store. Other deployments can use scripts, webhooks, SSH/SFTP, or UNC shares. Hub offers a web interface, API, role-based access, managed DNS challenges, and certificate monitoring across instances. A free evaluation has no feature limits or time limit. Cloud-managed licensing starts at $4.99 a month per install; other plans have annual or longer billing terms. Licenses do not bypass certificate authority rate limits.

Spec sheet

What it does
Certify The Web automates requesting, deploying and renewing TLS certificates through ACME certificate authorities.Read 15 Oct 2026 · docs.certifytheweb.com
Purpose
Certify The Web products request, deploy, and renew TLS certificates.Read 28 Sep 2026 · docs.certifytheweb.com
API
Management Hub exposes a web API with scoped API authentication and service-principal access.Read 15 Oct 2026 · docs.certifytheweb.com
Security
Credentials are encrypted at rest; Certificate Manager uses Windows DPAPI or .NET key-based encryption, while Hub adds role-based access controls and scoped API authentication.Read 28 Sep 2026 · docs.certifytheweb.com
Support
Every license includes email support tickets, and the free evaluation includes helpdesk guidance.Read 28 Sep 2026 · certifytheweb.com
Headquarters
Wembley, Western Australia, AustraliaRead 28 Sep 2026 · certifytheweb.com
Central management
Management Hub provides a web UI, API, role-based access, managed DNS challenges, and coordination for Certificate Manager and Management Agent instances.Read 28 Sep 2026 · docs.certifytheweb.com
Certificate authorities
Supported authorities include Let's Encrypt, Google Trust Services, ZeroSSL, Actalis and private or enterprise ACME CAs.Read 15 Oct 2026 · docs.certifytheweb.com
Certificate Manager
Certify Certificate Manager is a Windows desktop application with a background service for certificate lifecycle management.Read 15 Oct 2026 · docs.certifytheweb.com
Certificate validation
Domain validation can use HTTP or DNS, including built-in DNS providers, Certify DNS, acme-dns, manual TXT records, or custom DNS scripts.Read 28 Sep 2026 · docs.certifytheweb.com
Changelog
The published release notes list version 6.1.11 dated 2025-10-21, including SSH and certificate-key cleanup fixes.Read 15 Oct 2026 · certifytheweb.com
CLI
The software includes a command-line interface for operations such as joining a Hub and managing credentials.Read 15 Oct 2026 · docs.certifytheweb.com
Company founded
The vendor says the business was established in 2017.Read 15 Oct 2026 · docs.certifytheweb.com
Company headquarters
The vendor lists its address as Unit 9A, 151 Herdsman Parade, Wembley, Western Australia 6014, Australia.Read 15 Oct 2026 · docs.certifytheweb.com
Company legal name
The legal provider is Webprofusion Pty Ltd ATF The Webprofusion Trust.Read 15 Oct 2026 · docs.certifytheweb.com
Company size
The vendor describes itself as a small business based in Western Australia.Read 15 Oct 2026 · docs.certifytheweb.com
Custom deployment
Other services can use PowerShell or Bash scripts, webhooks, SSH/SFTP, or UNC shares for deployment.Read 28 Sep 2026 · docs.certifytheweb.com
Dashboard
Certify Dashboard aggregates certificate status, renewal activity and failures across an organization.Read 15 Oct 2026 · docs.certifytheweb.com
Data protection
Credentials are encrypted at rest using Windows DPAPI or .NET key-based encryption, while Hub adds role-based access controls.Read 15 Oct 2026 · docs.certifytheweb.com
Deployment automation
Built-in deployment tasks can export certificates or update services such as Apache, nginx, Tomcat, Exchange and vault systems.Read 15 Oct 2026 · docs.certifytheweb.com
Deployment integrations
Built-in deployment tasks cover IIS, Apache, nginx, Tomcat, Exchange, ADFS, RDP, Azure App Service, Azure Key Vault, HashiCorp Vault, and IIS Centralized Certificate Store.Read 28 Sep 2026 · docs.certifytheweb.com
DNS service
Certify DNS provides hosted ACME DNS challenge handling with CNAME delegation and acme-dns compatibility.Read 15 Oct 2026 · docs.certifytheweb.com
Documentation depth
The documentation covers product guides, installation, certificate requests, deployment tasks, troubleshooting, licensing and security.Read 15 Oct 2026 · docs.certifytheweb.com
IIS integration
Certificate Manager directly manages IIS bindings and the Windows certificate store.Read 15 Oct 2026 · docs.certifytheweb.com
Independent listing
SourceForge describes Certify The Web as a Windows ACME application with IIS deployment and automatic renewal, and shows no user reviews yet.Read 15 Oct 2026 · sourceforge.net
Independent praise: automation
A Reddit user reported that the product made certificate installation and renewal easy across customer servers.Read 15 Oct 2026 · reddit.com
Independent praise: IIS
A Reddit administrator said Certify The Web handles IIS natively and is among the strongest options for IIS integration.Read 15 Oct 2026 · reddit.com
Independent project scale
The public GitHub repository shows about 1.7k stars, 283 forks and 3,667 commits.Read 15 Oct 2026 · github.com
Installer privilege
Installation and operation require elevated privileges to update certificate stores and web-server bindings.Read 15 Oct 2026 · docs.certifytheweb.com
Intended use
Certificate Manager is for Windows servers or desktops, Management Agent is for headless Linux and macOS systems, and Management Hub centrally administers multiple instances.Read 28 Sep 2026 · docs.certifytheweb.com
Licence
The main application source is publicly viewable on GitHub, but the vendor describes the products as commercial and requires business users to license them.Read 15 Oct 2026 · docs.certifytheweb.com
Limit: CA rate limits
A Let's Encrypt community discussion notes that repeatedly expanding a multi-domain certificate can hit issuance limits and the 100-name certificate limit.Read 15 Oct 2026 · community.letsencrypt.org
Limit: pricing
Multiple Reddit commenters considered the annual per-server pricing too high for environments needing only one or two certificates.Read 15 Oct 2026 · reddit.com
Limit: renewal reliability
One MSP commenter reported certificate validation or installation problems on roughly 20% of servers and questioned the value for small deployments.Read 15 Oct 2026 · reddit.com
Limits
A license does not let customers exceed their certificate authority's own rate limits.Read 28 Sep 2026 · certifytheweb.com
Management Agent
Certify Management Agent supports headless Linux and macOS certificate management.Read 15 Oct 2026 · docs.certifytheweb.com
Management Hub
Management Hub provides a centralized cross-platform web interface for administering multiple certificate instances.Read 15 Oct 2026 · docs.certifytheweb.com
Monitoring
Hub and Certify Dashboard aggregate certificate status, expiry, renewal failures, notifications, and renewal history across instances.Read 28 Sep 2026 · docs.certifytheweb.com
Operational logging
The support forum says per-certificate logs are stored under C:\ProgramData\Certify\logs and failures can be reported through the vendor API.Read 15 Oct 2026 · community.certifytheweb.com
Rating on SourceForge
Not rated out of 5 from 0 reviewsRead 15 Oct 2026 · sourceforge.net
Scripting
PowerShell tasks and custom pre-request or post-deployment scripts can extend certificate workflows.Read 15 Oct 2026 · docs.certifytheweb.com
Security limitation
The vendor says it has no bug-bounty program and asks researchers to report vulnerabilities by email.Read 15 Oct 2026 · docs.certifytheweb.com
Self-hosting
Management Hub can run on Windows, Linux, containers, Kubernetes or OpenShift and can use SQLite, SQL Server or PostgreSQL.Read 15 Oct 2026 · docs.certifytheweb.com
System requirements
Certificate Manager requires a currently Microsoft-supported 64-bit Windows or Windows Server edition compatible with .NET 10 and outbound HTTPS.Read 15 Oct 2026 · docs.certifytheweb.com
Third-party clients
Hub and Management Agent can monitor Certbot, acme.sh, win-acme, simple-acme, and Posh-ACME.Read 28 Sep 2026 · docs.certifytheweb.com
Trust and compliance
Webprofusion says its security practices align with ISO/IEC 27001 principles, while stating it is not currently ISO/IEC 27001 certified.Read 28 Sep 2026 · docs.certifytheweb.com
Validation methods
The product supports HTTP and DNS domain validation, including wildcard certificates through DNS validation.Read 15 Oct 2026 · docs.certifytheweb.com

Plans and prices

Free evaluation Free No feature limitations · no time limit Read 28 Sep 2026 · certifytheweb.com
Free evaluation Free No feature restrictions · no time limit · unlicensed evaluation mode Read 15 Oct 2026 · docs.certifytheweb.com
Certify Certificate Manager cloud managed license $4.99 a month per install / month through Microsoft Azure Hub requires a quantity of 10 or more Read 28 Sep 2026 · certifytheweb.com
Cloud Managed License $4.99 a month Monthly through Microsoft Azure Per activated install · Hub requires 10 or more installs/seats Read 15 Oct 2026 · docs.certifytheweb.com
Starter $59 a year 12 months 1 activated instance · no Management Hub Read 15 Oct 2026 · docs.certifytheweb.com
Starter $59 a year for 1 year 1 server · unlimited certificates · Certificate Manager and Management Agent Read 28 Sep 2026 · certifytheweb.com
Certify DNS (Standard) $60 a year for 1 year Hosted acme-dns service · CNAME delegation of ACME DNS challenges Read 28 Sep 2026 · certifytheweb.com
Professional $149 a year for 1 year Up to 3 servers · unlimited certificates · Certificate Manager and Management Agent Read 28 Sep 2026 · certifytheweb.com
Professional $149 a year 12 months Up to 3 activated instances · no Management Hub Read 15 Oct 2026 · docs.certifytheweb.com
Power Pro $1,199 a year 24 months Up to 50 activated instances · Management Hub included Read 15 Oct 2026 · docs.certifytheweb.com
Power Pro $1,199 a year for 2 years Up to 50 servers · unlimited certificates · includes Certify Management Hub Read 28 Sep 2026 · certifytheweb.com
Enterprise $5,499 a year for 3 years Up to 250 servers · unlimited certificates · includes Certify Management Hub Read 28 Sep 2026 · certifytheweb.com

Every Certify The Web plan and price →

Strong points and limits

Strong points

  • Free evaluation has no time or feature limits.
  • Supports multiple ACME and private certificate authorities.
  • Includes automated renewal and deployment tasks.
  • Hub monitors certificate status across instances.
  • Email support tickets are included with every license.

Limits

  • Licenses do not exceed certificate authority rate limits.
  • Hub requires a quantity of 10 or more on the cloud-managed license.
  • Some plans are billed for two or three years.

Who it suits

It suits administrators managing TLS certificates on Windows servers or desktops, headless Linux or macOS machines, or multiple instances centrally. Teams needing deployment automation across the listed services and certificate authorities can use its integrations.

Certify The Web in depth

Read the full write-up

Overview

Certify The Web is a TLS certificate lifecycle toolkit for administrators managing certificates across Windows, Linux, or macOS. Its clearest advantage is the combination of flexible deployment automation and plans that allow unlimited certificates within a server cap; choose another tool if you need to exceed a certificate authority’s rate limits.

Key features

Validation and certificate authorities

ACME support includes Let’s Encrypt, Google Trust Services, ZeroSSL, Actalis, and private or enterprise certificate authorities. Domain validation can use HTTP or DNS challenges, with DNS options ranging from built-in providers and Certify DNS to acme-dns, manual TXT records, or custom scripts. This breadth accommodates varied DNS setups, but a license does not raise the selected authority’s own rate limits. Certificate discovery, automatic renewal, and revocation workflows round out lifecycle management.

Deployment and administration

Built-in deployment tasks cover IIS, Apache, nginx, Tomcat, Exchange, ADFS, RDP, Azure App Service, Azure Key Vault, HashiCorp Vault, and IIS Centralized Certificate Store. For other services, deployment can use PowerShell or Bash scripts, webhooks, SSH/SFTP, or UNC shares. That range makes the product useful where certificates must reach a mix of infrastructure rather than a single web server.

Certificate Manager is aimed at Windows servers or desktops; Management Agent is for headless Linux and macOS systems. Management Hub adds a web interface, API, role-based access, managed DNS challenges, and coordination across Manager and Agent instances. Hub and Certify Dashboard aggregate certificate status, expiry, renewal failures, notifications, and renewal history; Hub and Agent can also monitor Certbot, acme.sh, win-acme, simple-acme, and Posh-ACME.

Security and support

Credentials are encrypted at rest, using Windows DPAPI or.NET key-based encryption in Certificate Manager. Hub adds role-based controls and scoped API authentication. Webprofusion says its security practices align with ISO/IEC 27001 principles, but it is not ISO/IEC 27001 certified. Every license includes email support tickets, and the free evaluation includes helpdesk guidance.

Pricing

The Free evaluation costs nothing, has no time limit, and carries no feature limitations. It is a useful way to start without a deadline or feature gate. The cloud-managed Certificate Manager license costs $4.99 a month, billed per install per month through Microsoft Azure; Management Hub requires a quantity of 10 or more, so this entry price is not a general low-cost route to Hub.

Starter costs $59 a year, billed for one year, and covers one server with unlimited certificates plus Certificate Manager and Management Agent. It fits a single-server deployment, but offers no room to add a second server under the same plan. Professional costs $149 a year, billed for one year, and raises the cap to three servers while retaining unlimited certificates and both Manager and Agent. It is the more suitable step up for small multi-server estates.

Certify DNS (Standard) costs $60 a year, billed for one year, for a hosted acme-dns service and CNAME delegation of ACME DNS challenges. It addresses DNS challenge delegation rather than adding server capacity. Power Pro costs $1,199 a year, billed for two years, and covers up to 50 servers with unlimited certificates and Management Hub. Enterprise costs $5,499 a year, billed for three years, and extends that model to 250 servers. Those tiers suit larger estates that need central coordination, but their longer billing terms and sizable server commitments make them poor fits for small deployments.

Platforms

The product spans Windows, Linux, and macOS, with API, web, and self-hosted options. That aligns the Windows-focused Certificate Manager and headless Unix-like Management Agent with centralized web and API administration.

Who it's for

Certify The Web suits administrators who want to automate TLS issuance, deployment, and renewal across a small server setup or coordinate many instances centrally. The unlimited-certificate allowance in the Starter and Professional tiers is useful when server count, rather than certificate count, is the main sizing question. Teams that need Hub should weigh the 10-install minimum on the cloud-managed license or the higher-capacity Power Pro and Enterprise commitments.

Pros and cons

Broad deployment coverage: Built-in integrations and script, webhook, SSH/SFTP, and UNC options support varied destinations.

Unlimited certificates on server plans: Starter and Professional scale certificate count without changing tiers, subject to CA rate limits.

Central monitoring: Hub and Dashboard consolidate expiry, renewal failures, notifications, and history across instances, including several third-party ACME clients.

Server caps and long terms: Larger plans cover more servers but require two- or three-year billing, while the cloud-managed Hub route has a 10-install minimum.

Certification caveat: Security practices align with ISO/IEC 27001 principles, but the company is not certified to that standard.

Alternatives

Certificate Management Software is the category directory for comparing other certificate-management choices. KeyTalk CKMS is worth considering when S/MIME management for up to 250 participants, multiple devices, and a per-user monthly price is the priority. Qualys External Attack Surface Management offers a 30-day, no-cost CSAM with EASM period for readers evaluating that security-management option.

ManageEngine Key Manager Plus may suit teams focused on managing keys, with a free plan and a 25-managed-key on-premises license priced at $59 a month. Certbot is the alternative to consider when free, open-source certificate tooling is the priority and centralized management is not the deciding requirement. Entrust Certificate Manager is another paid certificate-management option, with custom pricing.

Keyfactor Platform may fit large certificate-lifecycle deployments where no per-certificate fees and support for deployments tested at 500 million-plus certificates matter. Oracle Cloud Infrastructure Secret Management is a free alternative for API and web users looking for secret management rather than this TLS-focused workflow. Sectigo Certificate Manager is a paid alternative with monthly tiers, including a Basic plan for approximately 2–10 certificates and three FQDNs with manual issuance and management.

Verdict

Choose Certify The Web if you need flexible TLS deployment and renewal across a defined number of servers, especially when unlimited certificates and eventual central monitoring matter. Its practical strengths are broad integrations and a free, unrestricted evaluation; look elsewhere if your server count or billing commitment does not fit its tiers, or if you need certificate issuance beyond the CA’s rate limits.

Verdict

Certify The Web covers certificate requests, validation, deployment, renewal, and multi-instance monitoring. Review the intended role of each component and the billing term that matches the number of servers.

Where Specifiction places it

Alternatives to Certify The WebAll alternatives →