- Get started
-
Manage certificates
-
Client Certificates Guide
- Order your client certificate
- Reissue your client certificate
- Renew your client certificate
- Cancel pending client certificate orders
- Cancel pending client certificate reissues
- Client certificate revocation process
- Resend the email validation for DigiCert client certificate email
- Resend the "Create Your DigiCert Client Certificate" email
- Turn on client certificate renewal notifications
- Configure the client certificate approval process
- Generate your client certificate
- Configure Outlook to use your Email Security Plus Personal ID Certificate
-
SAML Admin Certificate Requests Guide
- SAML Certificate Requests prerequisites
- SAML Certificate Requests service workflow
- SAML request a certificate workflow
- Configure SAML Certificate Requests
- Turn off SAML Certificate Requests
- Restore access to SAML Certificate Requests accounts
- SAML: Request a client certificate
- SAML: Generate your client certificate
- SAML: Download a copy of your client certificate
- SAML: Submit a request to revoke a client certificate
- SAML: Resend the Create Your DigiCert Client Certificate email
- Allow Access to SAML Settings
- Secure Site certificate benefits
- Revoke an issued SSL/TLS certificate
- Get a copy of your TLS/SSL certificate
- Add or replace the CSR on a pending certificate order
- Order your SSL/TLS certificates
-
Organization and domain management
- Validation process
- Organization validation
- TLS certificate organization validation process
- Domain validation
- Manage organizations
-
Manage domains
- Supported domain control validation (DCV) methods for domain prevalidation
- Hide alternative domain control validation (DCV) methods
- Add a domain, authorize the domain for certificates, and use verification email as the DCV method
- Add a domain, authorize the domain for certificates, and use DNS CNAME record as the DCV method
- Add a domain, authorize the domain for certificates, and use DNS TXT as the validation method
- Add a domain, authorize the domain for certificates, and use HTTP practical demonstration as the validation method
- Common mistakes: HTTP practical demonstration DCV method
- Change a domain's domain control validation (DCV) method
- Domain prevalidation: Revalidate your domain before validation expires
- DNS CAA resource record check
- Domain locking
- Manage certificate request approvals
- Grant a Limited user access to a certificate order
- Automatic certificate renewal
- Individual Certificate Renewal Notifications
- Basic and Business SSL/TLS Certificate Enrollment
-
Supported DCV methods for validating the domains on OV/EV TLS/SSL certificate orders
- Use the Email DCV method to verify domain control
- Use the DNS CNAME validation method to verify domain control
- Use the DNS TXT validation method to verify domain control
- Use the HTTP Practical Demonstration validation method to verify domain control
- Common mistakes: HTTP Practical Demonstration DCV method
- Cancel a certificate order
- Choose the language preference for your account
-
Logging Public SSL/TLS Certificates in to Public CT Logs
- Will DigiCert log all certificates to public CT Logs?
- When and when not to log Public SSL/TLS Certificates
- Keeping SSL/TLS Certificates Out of Public CT Logs
- Methods for Keeping SSL/TLS Certificates Out of CT Logs
- Allow users to keep certificates out of CT logs
- Turn off CT logging for your account
- Check if CT logging is disabled for your account
- Add an unlogged SSL/TLS certificate to public CT logs
- DV TLS/SSL Certificate enrollment
- Public certificates – Data entries that violate industry standards
- Certificate profile options
- Renew an SSL/TLS certificate
- Code signing certificates
- Document signing certificates
- Reissue an SSL/TLS certificate
- Duplicate an SSL/TLS certificate
- Retiring underscores in domain names
- DNS CAA resource record check
- EV certificate countries
- Flex certificates
- Vouchers
- Automatic domain control validation checks
- Mark a migrated certificate order as renewed
- Multi-year Plans
- End of 2-Year DV, OV, and EV public SSL/TLS certificates
- ICA certificate chain selection feature for public TLS certificates
- Setting the "validTo" time on certificates
- DigiCert site seals
-
Report Library
- Build and edit an Audit log report
- Build and edit a Balance history report
- Build and edit a Domains report
- Build and edit an FQDN report
- Build and edit an Orders report
- Build and edit an Organizations report
- Downloading and viewing reports in the Report Library
- What are the most useful types of reports I can generate?
- What are some common reports and how do I generate them?
- Troubleshooting reports
- Review all OV domains affected by the reduced 397-day validity period
- Verified Mark Certificate (VMC)
-
Client Certificates Guide
-
Certificate tools
- Discovery cloud scan service
-
Discovery user guide
- Discovery prerequisites
- Discovery workflow and permissions
- Sensor installation requirements
- Install a sensor
- Sensor file structure
- Configure a sensor to use a proxy server for communications
- Activate a sensor
- Stop a sensor
- Update a sensor
- Restart a sensor
- Suspend a sensor
- Void a sensor
- Uninstall a sensor
- Rename the sensor
- Set up and run a scan
- Edit a scan
- Sensor troubleshooting
- Add public and private root and intermediate CAs
- Blocklist IP addresses and FQDNs
- Manually upload certificates
- Delete all scan records from scan results
- Discovery renewal notices
- TLS/SSL certificate vulnerabilities
- TLS/SSL endpoint vulnerabilities
- Supported endpoint configuration
- Replace a certificate
- SSH keys
-
Certificate lifecycle automation guides
- Automation service overview
-
CertCentral managed automation user guide
- Get started with automation
- Managed automation workflow
- Set up ACME agent-based automation for hosts
- Set up sensor-based automation for network appliances
- Automation profiles
- Schedule automation events
- Configure automatic renewal of certificates
- Request duplicate certificates
- Certificates eligible for retry
- Get multiple TLS/SSL certificates using SNI automation
- Common Name (CN) for a wildcard certificate
- Manage blocked agent ports
- Create a DNS integration to automate DV certificates on load balancers
- DNS integration CLI commands
- Discovery service integration with automation workflows
- Automation: Known issues
- Third-party ACME client automation user guide
- Post-Quantum Cryptography
- Azure Key Vault integration guide
- CT log monitoring service
- Vulnerability assessment service
-
Manage account
-
SAML Admin Single Sign-On Guide
- SAML Single Sign-on prerequisites
- SAML service workflow
- Configure SAML Single Sign-On
- Turn off SAML Single Sign-on
- Restore SAML Single Sign-on for CertCentral accounts
- Allow access to SAML Settings permission
-
Managing SAML Single Sign-on (SSO) users
- Administrators and managers: SAML SSO-only versus SAML SSO account
- SAML SSO account users versus SAML SSO-only users
- Difference when converting SAML SSO-only and SAML SSO account users
- Add a SAML SSO-only or a SAML SSO account user
- Convert a SAML SSO-only or SAML SSO account user
- SAML SSO: Invite users to join your account
- Unlock a "locked" CertCentral account
- Add a credit card to your CertCentral user account
- Set up account credit
- Generate certificate price quotes in CertCentral
- Add a new user to your CertCentral account
- CertCentral user roles and account access
- Manage users
- Division management
- Customize your certificate request forms
- Manage Guest URLs
- CertCentral notifications
- Configure Private SSL certificate products
- CertCentral account balance and PO process changes
- DigiCert 2021 maintenance schedule
- Subaccount management
- DigiCert CertCentral Support Plans
-
CertCentral two-factor authentication
- CertCentral two-factor authentication account configurations
- Turn on two-factor authentication
- Turn off two-factor authentication
- Configure two-factor authentication requirements for your account
- Enable 30-day computer verification for OTP app authentication
- Set up the second factor of your two-factor authentication
- Guest access
- DigiCert 2022 maintenance schedule
- Add approved user email domains
-
SAML Admin Single Sign-On Guide
- Upgrade to CertCentral
- Change log
Discovery user guide
Discovery uses sensors to scan your network and find all your internal and public-facing SSL/TLS certificates regardless of the issuing Certificate Authority (CA). These sensors are small software applications that you install in strategic locations.
Each scan is linked to one sensor. Scans are configured to examine specific fully qualified domain names (FQDNs), IP addresses, and port combinations for the presence of TLS/SSL certificates. Configure scans to run immediately, once – at a specified time, or multiple times – on a set schedule.
These scans provide detailed information about certificates in your network:
- Common name
- Expiration date
- Certificate status
- Issuing certificate authority
- Ports and IP addresses of the certificate host
- Certificate security rating
- Server security issues
- TLS/SSL vulnerabilities
Scans can be used to identify the operating system of your server host, the open IP addresses and ports, and the server host of the IP addresses.
Topics
- Discovery prerequisites
- Discovery workflow and permissions
- Sensor installation requirements
- Install a sensor
- Sensor file structure
- Configure a sensor to use a proxy server for communications
- Activate a sensor
- Stop a sensor
- Update a sensor
- Restart a sensor
- Suspend a sensor
- Void a sensor
- Uninstall a sensor
- Rename the sensor
- Set up and run a scan
- Edit a scan
- Sensor troubleshooting
- Add public and private root and intermediate CAs
- Blocklist IP addresses and FQDNs
- Manually upload certificates
- Delete all scan records from scan results
- Discovery renewal notices
- TLS/SSL certificate vulnerabilities
- TLS/SSL endpoint vulnerabilities
- Supported endpoint configuration
- Replace a certificate
- SSH keys