CertKit SSL Certificate Automation

Curious how CertKit works? certkit.io/how-it-works

PSA: You don't need a private CA for internal SSL certificates. DNS-01 ACME challenges let you issue publicly trusted certs for servers on private subnets. The CA checks a DNS record. Your server never has to be internet-reachable. certkit.io/blog/private-p… #PKI #SSL

Certificate compliance reviews are hard when you don't know what your automation did. CertKit now logs every action in your certificate lifecycle. Issuances, revocations, agent approvals, domain changes. Searchable, filterable, flagged by importance. #CertificateManagement #PKI

NEXT WEEK! I'll be joining the folks @certkitio on Tuesday, May 26 at 11:00 AM CDT for a webinar on certificate automation of #Microsoft #Windows infrastructure. Learn how to simply TLS lifecycle management and reduce operational risk with automation. Register now! #identity #security rmhci.co/4cMoiYM

F5 LTM. Palo Alto. Azure Key Vault. Exchange. We shipped a deployment template library for all of them. Pick your target and push certificates to your infrastructure. certkit.io/blog/deploymen… #CertificateManagement #PKI

Managing certificates manually? Still tracking expirations in spreadsheets? There’s a better way. Join me and the folks @certkitio on Tuesday, May 26 at 11:00 AM CDT for a free webinar where we'll show you how to automate certificate management across your Windows infrastructure. Register today! #identity #security #pki rmhci.co/4cMoiYM

@PrimeSyntax @richardhicks Yeah, we'll record it. Sign up and you'll get the watch link afterwards.

@richardhicks @certkitio Is it possible to view afterwards?

50 SSL certificates managed manually: ~50 renewals a year today. Same team, same certs, in 2029: 400. That isn't a process tweak. It's a different job. certkit.io/blog/shrinking… #PKI #SSL

Your VPN, RRAS, and IIS all need certificates. None of them can run ACME. Most teams patch this with scripts and hope. May 26, @richardhicks and @toddhgardner are doing 30 minutes on what actually works. certkit.io/blog/webinar-c… #SSL #WindowsServer

Any team that's been running Certbot long enough has accidentally built half a certificate lifecycle manager. One crisis at a time, without realizing it. certkit.io/blog/todds-ten… #CertificateManagement #SysAdmin

New in CertKit: copy and link agent configs so you're not rebuilding the same setup across 50 servers. Plus monitor search/filtering and our first GDPR Data Processing Agreement. certkit.io/blog/shared-co… #SSL #CertificateManagement

CertKit 1.9: push agent updates from the dashboard, no more server-by-server upgrades. Plus Google Trust Store as a second ACME issuer. certkit.io/blog/agent-1.9 #SSL #CertificateManagement

One certificate management vendor used the word "trust" 17 times on their homepage. I still couldn't tell what they sell or what it costs. Apparently that's what the sales call is for. certkit.io/blog/performat… #PKI #cybersecurity

Great news! @certkitio is now in general release! Comprehensive public #TLS certificate lifecycle management with monitoring, visibility, and reporting. Sign up today! #security #pki certkit.io/blog/out-of-be…

CertKit is out of beta. 600 signups. Certificates renewing in production. Features built because users demanded them. Real product, real pricing — and 40% off forever for early adopters who act before May 31st. certkit.io/blog/out-of-be… #PKI #CertificateManagement

CertKit Agent 1.8: Windows Certificate Store, Java Keystore, and RDP auto-detection. Also: we shipped a retro MS-DOS modal on April Fools Day. It is not a joke. certkit.io/blog/agent-1.8 #Windows #CertificateManagement

@NHL_mspaint @smoon_lee It was a move that could have destroyed the CAB forum, and shifted control to the browser vendors.

@NHL_mspaint @smoon_lee You should read the story. Sectigo, along with all the other CAs, opposed every attempt to shorten lifetimes. Sectigo begrudgingly endorsed this one, because it was happening regardless. Apple (and Google) were going to drop lifetimes in their root programs regardless.

Sooo #TechTwitter, this was a fun one to come across today. 😅 #changeiscoming sectigo.com/blog/200-day-s…

Shout out to @richardhicks for his eagle-eyed certificate spotting.

Let's Encrypt ran a mass revocation drill on 3 million production certificates last month. No emails. No warnings. ARI clients renewed automatically. Everyone else had no idea it happened. That gap is the whole story. certkit.io/blog/lets-encr…

@smoon_lee We've been building a CA-agnostic way of handling certificate renewals, distribution, and monitoring. And it's a .NET project BTW. certkit.io

@smoon_lee We've been working on this problem for awhile. Sectigo and the other CAs fought this lifetime decrease for years, because they knew it would be the end of commercial certificates. Now they are scrambling to lock people into their management platforms. certkit.io/blog/47-day-ce…