Skip to main content

Manually upload certificates

Upload certificates manually to get the details of the certificate installed on your server without scanning the network.

Notice

Certificates uploaded manually only have primary details of the certificate and do not provide information associated with certificate vulnerabilities.

Upload certificates

  1. In your CertCentral account, in the left main menu, go to Discovery > Manage Discovery.

  2. On the Manage scans page, in the More actions dropdown, click Upload certificates.

  3. Select the Division from the dropdown list you want to associate your certificate with.

  4. Select an appropriate method to upload your certificates:

    Single certificate upload Enter the IP/FQDN, port, and TLS/SSL certificate and click Upload.

    Bulk upload in CSV file To import a CSV file containing a list of IP/FQDN, port, and TLS/SSL certificates, click Import from CSV. A CSV file must have:

    • Three columns in each row.

    • Field names for each column in the first row, as follows: IP/FQDN, Port, TLS/SSL certificate

    • Maximum file size 5 MB.

    Your daily upload limit is 10,000 certificates. You can upload a maximum of 1000 certificates or 5MB of file size at a time.

Note

  • Supported formats: FQDN (example.com), single IPv4 address (10.0.0.1), and single IPv6 address (2001:000:0000:001::1001).

  • You can also upload a certificate chain–root certificate, intermediate certificate, and end-user certificate, which must be in Base64 format.

A CSV file looks like this:

IP/FQDN

Port

TLS/SSL certificate

10.0.0.1

443

-----BEGIN CERTIFICATE----- primary certificate: base64 stringfrom certificate.crt -----END CERTIFICATE-----

2001:000:0000:001::1001

22

-----BEGIN CERTIFICATE----- intermediate certificate: base64 stringfrom ca_intermediate.crt -----END CERTIFICATE-----

*.example.com

443

-----BEGIN CERTIFICATE----- root certificate: base64 stringfrom ca_root.crt -----END CERTIFICATE-----

What’s next

To view the details of a certificate that was manually uploaded:

  1. Click View certificates.

  2. In the Certificates page, click the common name link.

To view the endpoints associated with the common name, click View endpoints on the certificate details page.