- Get started
-
Manage certificates
-
Client Certificates Guide
- Issue Client certificates (Admin)
- Reissue Client certificates (Admin)
- Renew Client certificates (Admin)
- Cancel pending client certificate orders
- Cancel pending Client certificate reissues
- Client certificate revocation process
- Resend the email validation for DigiCert client certificate email
- Resend the create your DigiCert client certificate email
- Turn on Client certificate renewal notifications
- Configure Client certificate approval process
- Generate your Client certificate
- Manage your Personal ID certificate
- Configure Outlook to use your Email Security Plus Personal ID Certificate
-
SAML Admin Certificate Requests Guide
- SAML Certificate Requests prerequisites
- SAML Certificate Requests service workflow
- SAML request a certificate workflow
- Configure SAML Certificate Requests
- Turn off SAML Certificate Requests
- Restore access to SAML Certificate Requests accounts
- SAML: Request a client certificate
- SAML: Generate your client certificate
- SAML: Download a copy of your client certificate
- SAML: Submit a request to revoke a client certificate
- SAML: Resend the Create Your DigiCert Client Certificate email
- Allow Access to SAML Settings
- Secure Site certificate benefits
- Revoke an issued SSL/TLS certificate
- Get a copy of your SSL/TLS certificate
- Add or replace the CSR on a pending certificate order
- Order your SSL/TLS certificates
-
Organization and domain management
- Validation process
- Organization validation
- TLS certificate organization validation process
- Domain validation
- Manage organizations
-
Manage domains
- Domain prevalidation: DCV methods
- Hide alternative domain control validation (DCV) methods
- Add a domain, authorize the domain for certificates, and use verification email as the DCV method
- Add a domain, authorize the domain for certificates, and use DNS CNAME record as the DCV method
- Add a domain, authorize the domain for certificates, and use DNS TXT as the validation method
- Add a domain, authorize the domain for certificates, and use HTTP practical demonstration as the validation method
- Common mistakes: HTTP practical demonstration DCV method
- Change a domain's domain control validation (DCV) method
- Domain prevalidation: Revalidate your domain before validation expires
- Domain validation (pending order): DCV methods
- DNS CAA resource record check
- Manage certificate request approvals
- Grant a Limited user access to a certificate order
- Automatic certificate renewal
- Individual Certificate Renewal Notifications
- Basic and Business SSL/TLS Certificate Enrollment
-
Demonstrate control over domains on a pending certificate order
- Use the Email DCV method to verify domain control
- Use the DNS CNAME validation method to verify domain control
- Use the DNS TXT validation method to verify domain control
- Use the HTTP Practical Demonstration validation method to verify domain control
- Common mistakes: HTTP Practical Demonstration DCV method
- Cancel a certificate order
- Get a copy of your SSL certificate
- Choose the language preference for your account
-
Logging Public SSL/TLS Certificates to Public CT Logs
- Will DigiCert Log All Certificates to Public CT Logs?
- When and When Not to Log Public SSL/TLS Certificates
- Keeping SSL/TLS Certificates Out of Public CT Logs
- Methods for Keeping SSL/TLS Certificates Out of CT Logs
- Allow Users to Keep Certificates Out of CT Logs
- Turn Off CT Logging for Your Account
- Check if CT Logging Is Disabled for Your Account
- Add an Unlogged SSL/TLS Certificate to Public CT Logs
- DV Certificate Enrollment
- Public certificates – Data entries that violate industry standards
- Certificate profile options
- Renew an SSL/TLS certificate
-
Code signing certificates
- Protect private keys
- Order a Code Signing certificate
- Order an EV code signing certificate
- Reissue or re-key a Code Signing certificate
- Reissue or re-key an EV Code Signing certificate
- Renew a code signing certificate
- Resend "Create Your DigiCert Code Signing Certificate" email
- Download a code signing certificate
- Document signing certificates
- Reissue an SSL/TLS certificate
- Duplicate an SSL/TLS certificate
- Retiring underscores in domain names
- DNS CAA resource record check
- EV certificate countries
- Flex certificates
- Vouchers [Beta]
- Automatic domain control validation checks
- Mark a migrated certificate order as renewed
- Multi-year Plans
- End of 2-Year DV, OV, and EV public SSL/TLS certificates
- ICA certificate chain option for public OV and EV flex certificates
- Setting the "validTo" time on certificates
-
Client Certificates Guide
-
Certificate tools
- Discovery cloud scan service
-
Discovery user guide
- Discovery prerequisites
- Discovery workflow and permissions
- Sensor installation requirements
- Install a sensor
- Sensor file structure
- Configure a sensor to use a proxy server for communications
- Activate a sensor
- Stop a sensor
- Update a sensor
- Restart a sensor
- Suspend a sensor
- Void a sensor
- Uninstall a sensor
- Rename the sensor
- Set up and run a scan
- Edit a scan
- Sensor troubleshooting
- Add public and private root and intermediate CAs
- Blocklist IP addresses and FQDNs
- Manually upload certificates
- Delete all certificates and endpoints from scan results
- Discovery renewal notices
- TLS/SSL certificate vulnerabilities
- TLS/SSL endpoint vulnerabilities
- Supported endpoint configuration
- Replace a certificate
-
Certificate lifecycle automation guides
-
CertCentral-managed automation user guide
- Automation getting started
- Automation workflow
- Automation profiles
- Set up ACME automation for an endpoint device
- Set up sensor (agentless) automation for a load balancer
- Schedule an automation event
- Common Name (CN) for a wildcard certificate
- Configure automatic renewal of automation profiles and certificates
- Automation: Known issues
- Manual ACME automation integration user guide
-
CertCentral-managed automation user guide
- Post-Quantum Cryptography
- Azure Key Vault integration guide
- CT log monitoring service
- Vulnerability assessment service
-
Manage account
-
SAML Admin Single Sign-On Guide
- SAML Single Sign-on prerequisites
- SAML service workflow
- Configure SAML Single Sign-On
- Turn off SAML Single Sign-on
- Restore SAML Single Sign-on for CertCentral accounts
- Allow access to SAML Settings permission
-
Managing SAML Single Sign-on (SSO) users
- Administrators and managers: SAML SSO-only versus SAML SSO account
- SAML SSO account users versus SAML SSO-only users
- Difference when converting SAML SSO-only and SAML SSO account users
- Add a SAML SSO-only or a SAML SSO account user
- Convert a SAML SSO-only or SAML SSO account user
- SAML SSO: Invite users to join your account
- Unlock a "locked" CertCentral account
- Add a credit card to your CertCentral account
- Set up account credit
- Add a new user to your CertCentral account
- CertCentral user roles and account access
- CertCentral language preferences
- Manage users
- Division management
- Customize your certificate request forms
- Manage Guest URLs
- CertCentral notifications
- Configure Private SSL certificate products
- CertCentral account balance and PO process changes
- DigiCert 2021 maintenance schedule
- Subaccount management
- DigiCert CertCentral Support Plans
-
CertCentral two-factor authentication
- CertCentral two-factor authentication account configurations
- Turn on two-factor authentication
- Turn off two-factor authentication
- Configure two-factor authentication requirements for your account
- Enable 30-day computer verification for OTP app authentication
- Set up the second factor of your two-factor authentication
- Guest access
-
SAML Admin Single Sign-On Guide
-
Upgrade to CertCentral
- What should I know before I upgrade to CertCentral?
- Where are my certificates?
- Where do I manage payment options?
- Where do I manage my organization information?
- How does CertCentral make managing certificates easier?
- CertCentral upgrade FAQ for Enterprises, Partners, and Resellers
- How do I move CWS discovery to CertCentral Discovery?
- How do I migrate my Venafi integration to CertCentral?
- What you need to know about account data migration
- What you need to know about domain and certificate migration
- Change log
Discovery user guide
Discovery uses sensors to scan your network and find all your internal and public-facing SSL/TLS certificates regardless of the issuing Certificate Authority (CA). These sensors are small software applications that you install in strategic locations.
Each scan is linked to one sensor. Scans are configured to examine specific fully qualified domain names (FQDNs), IP addresses, and port combinations for the presence of TLS/SSL certificates. Configure scans to run immediately, once – at a specified time, or multiple times – on a set schedule.
These scans provide detailed information about the certificates found in your network:
- Common name
- Expiration date
- Certificate status
- Issuing certificate authority
- Ports and IP addresses of the certificate host
- Certificate security rating
- Server security issues
- TLS/SSL vulnerabilities
Scans can be used to identify the operating system of your server host, the open IP addresses and ports, and the server host of the IP addresses.
Topics
- Discovery prerequisites
- Discovery workflow and permissions
- Sensor installation requirements
- Install a sensor
- Sensor file structure
- Configure a sensor to use a proxy server for communications
- Activate a sensor
- Stop a sensor
- Update a sensor
- Restart a sensor
- Suspend a sensor
- Void a sensor
- Uninstall a sensor
- Rename the sensor
- Set up and run a scan
- Edit a scan
- Sensor troubleshooting
- Add public and private root and intermediate CAs
- Blocklist IP addresses and FQDNs
- Manually upload certificates
- Delete all certificates and endpoints from scan results
- Discovery renewal notices
- TLS/SSL certificate vulnerabilities
- TLS/SSL endpoint vulnerabilities
- Supported endpoint configuration
- Replace a certificate