Skip to content
How it works

Fewer certificate surprises. Less manual work.

See what is expiring, automate renewals and keep your services running. Here is how the pieces fit together.

Step 1

Add the sites you want to watch

Enter a public hostname and CertIntel checks its certificate on a schedule. There is nothing to install on the website.

  • See when certificates expire and whether connections are healthy.
  • Keep certificate details and changes in one searchable inventory.
Step 2

Bring internal systems into view

Install the CertIntel Agent on Windows or Linux to check the internal services and certificate files you choose.

  • One agent can check reachable appliances and services that cannot run an agent themselves.
  • Reports go out over HTTPS, so you do not need to open an inbound firewall port.
Step 3

Let the agent handle renewals

The agent's built-in ACME client requests certificates from a public CA. Choose Let's Encrypt or a compatible CA's custom ACME directory, set your domains and installation steps, then enable automatic renewal.

  • It requests, installs and renews certificates on the machine where it runs.
  • Already use Certbot, simple-acme or Posh-ACME? Keep them and connect their renewal reports instead.
Step 4

Know when something needs attention

Follow certificate health and renewal results from the dashboard, with alerts sent to the tools your team uses.

  • Spot expiring certificates, failed renewals and agents that stop checking in.
  • Choose email, Slack, Teams, Discord or other supported destinations on plans with alerts.
ACME made simple

From a new certificate to its next renewal

Set up a certificate workflow in the Windows app or Linux CLI. The agent does the work locally and reports the results to CertIntel.

  1. 01

    Request

    The agent requests a certificate from Let’s Encrypt or another compatible public ACME CA.

  2. 02

    Validate

    CertIntel hosts the DNS proof that you control the domain.

  3. 03

    Install

    The agent saves the certificate and runs your configured installation steps.

  4. 04

    Renew

    With auto-renew enabled, the agent repeats the process when renewal is due.

A one-time DNS setup

Add the CNAME record CertIntel gives you to your DNS. This lets CertIntel host the verification record used for issuance and renewal, without giving the agent access to change the rest of your DNS. This is called delegated DNS-01.

Your keys stay with you

The agent generates and keeps certificate private keys on your machine. CertIntel receives certificate details and renewal results. You can also set weekly renewal windows to fit your maintenance schedule.

Meet the CertIntel Agent Read the full walkthrough
FAQ

Common questions

Start with your first certificate.

Create a free account and add a public site or connect an agent.

Sign up free