Manually upload certificates

Upload certificates manually to get the details of the certificate installed on your server without scanning the network.

Certificates uploaded manually only have primary details of the certificate and do not provide information associated with certificate vulnerabilities.

Upload certificates

  1. In your CertCentral account, in the left main menu, go to Discovery > Manage Discovery.

  2. On the Manage scans page, in the More actions dropdown, click Upload certificates.

  3. Select the Division from the dropdown list you want to associate your certificate with.

  4. Select an appropriate method to upload your certificates:

    Bulk upload in CSV file
    To import a CSV file containing a list of IP/FQDN, port, and TLS/SSL certificates, click Import from CSV.

    • A CSV file must have:
      • Three columns in each row.
      • Field names for each column in the first row.
        Column A: IP/FQDN
        Column B: Port
        Column C: TLS/SSL certificate
      • Maximum 5MB of file size.
    • Your daily upload limit is 10,000 certificates. You can upload a maximum of 1000 certificates or 5MB of file size at a time.

    Single certificate upload
    Enter the IP/FQDN, port, and TLS/SSL certificate and click Upload.

    • Supported formats: FQDN (, single IPv4 address (, and single IPv6 address (2001:000:0000:001::1001).
    • You can also upload a certificate chain–root certificate, intermediate certificate, and end-user certificate, which must be in Base64 format.

A CSV file looks like this:

IP/FQDN Port TLS/SSL certificate 443 -----BEGIN CERTIFICATE-----
primary certificate: base64 stringfrom certificate.crt
2001:000:0000:001::1001 22 -----BEGIN CERTIFICATE-----
intermediate certificate: base64 stringfrom ca_intermediate.crt
* 443 -----BEGIN CERTIFICATE-----
root certificate: base64 stringfrom ca_root.crt

What’s next

To view the details of the certificate that were manually uploaded:

  1. Click View certificates.
  2. In the Certificates page, click the common name link.

To view the endpoints associated with the common name, click View endpoints on the certificate details page.