Certify The Web (@certifytheweb) header
Certify The Web (@certifytheweb) profile picture

Certify The Web

@certifytheweb

Professional ACME (Let's Encrypt, Google Trust etc) certificate management. Supported by @webprofusion Discussions: https://xitter.cf/t.co/5rlDINh0Hn

 Perth, Western Australia
certifytheweb.com
Joined May 2017
  • Tweets266
  • Following49
  • Followers261
3Media
Photo by Certify The Web (@certifytheweb)Photo by Certify The Web (@certifytheweb)Photo by Certify The Web (@certifytheweb)
Certify Certificate Manager and Certify Management Hub have reached general release with v7.1.0 certifytheweb.com/ Existing users are encouraged to explore the new hub product - just download and try out! It's especially useful if you have many CCM instances to manage.
1
1
123
Heads up, Let's Encrypt are switching to 64-day certs in February letsencrypt.org/2026/10/07/6… The quality of your renewal management process matters more today than it ever did. certifytheweb.com/
64-Day Certificate Lifetimes Coming Feb 2027

64-Day Certificate Lifetimes Coming Feb 2027

On February 10, 2027, all Let’s Encrypt subscribers will move to certificates with 64 day lifetimes by default unless they select an even shorter lifetime (45 or 6 days, as previously announced)....

letsencrypt.org
20
Here's a nice summary of this years updates to Certify Management Hub (and Certify Certificate Manager) so far: docs.certifytheweb.com/blog/…
Certify Management Hub in 2026: What's New This Year | Certify The Web Docs

Certify Management Hub in 2026: What's New This Year | Certify The Web Docs

A roundup of everything added to Certify Management Hub in 2026, from activity history and certificate inventory to tag scoping, certificate subscriptions and data store management.

docs.certifytheweb.com
81
Users upgrading are advised to test their workloads, especially powershell. This is a big update!
10
Reminder that Let's Encrypt now no longer issue certs with "client authentication" enabled by default. community.letsencrypt.org/t/… This mainly concerns machine-to-machine authentication using certs and does not affect most users.
Ending TLS Client Authentication Certificate Support in 2026

Ending TLS Client Authentication Certificate Support in 2026

Certificates issued with the classic profile no longer contain the “TLS Client Authentication” Extended Key Usage (EKU). If you require encounter breakage, you can opt-in to the tlsclient profile...

community.letsencrypt.org
46
Note that there are potential issues to consider with using the new Let's Encrypt "Generation Y" chain on Windows Servers (e.g. trusting the roots before your clients do). community.letsencrypt.org/t/…
Possible Issues on Windows with new YE/YR hierarchy

Possible Issues on Windows with new YE/YR hierarchy

Hi, In the event that any Windows Server administrators encounter client errors after renewing their certificates against the new "generation Y" hierarchy, I've started to put together an article...

community.letsencrypt.org
1
60
"This worked PERFECTLY.  Thanks so much.  Again, your application and team are amazing." Thanks, you're great too.
1
38
The docker version of our new Certify Management Hub product has had more than 50,000 image pulls: hub.docker.com/r/certifythew… Give it a try, feedback is very welcome!
1
1
96
The release candidate for v7.x of our product suite is out now: - Certify Management Hub (Windows, Docker, Linux, macOS) - Certify Certificate Manager (Windows) - Certify Management Agent (Docker, Linux, macOS) certifytheweb.com/home/chang…
1
1
120
We are aware of a potential issue caused by a recent Windows Update which stops the app UI talking to it's background service API. We are currently investigating the cause and fix.
1
1
220
Resolved: community.certifytheweb.com/…
Important: "Service Not Started" issue caused by Windows Update

Important: "Service Not Started" issue caused by Windows Update

We are receiving reports of app users encountering “Service Not Started” errors when opening the UI, even though the Certify service is still running. [This issue also affected thousands of other...

community.certifytheweb.com
38
We are tracking this "Service Not Started" issue regarding a broken windows update on our community forum community.certifytheweb.com/…
Important: "Service Not Started" issue caused by Windows Update

Important: "Service Not Started" issue caused by Windows Update

We are receiving reports of app users encountering “Service Not Started” errors when opening the UI, even though the Certify service is still running. [This issue also affected thousands of other...

community.certifytheweb.com
Certify The Web (@certifytheweb) profile pictureCertify The Web@certifytheweb15 Oct 2025
We are aware of a potential issue caused by a recent Windows Update which stops the app UI talking to it's background service API. We are currently investigating the cause and fix.
1
1
136
Solution is to install the very latest Windows Defender definitions (Version 1.439.216.0 or higher), which can require manual update and reboot.
38
BuyPass have announced they are terminating their free ACME services in October. If you are using their service you should begin migration now. community.buypass.com/t/y4y1… Let's Encrypt and Google Trust Service are some of our suggested alternatives.
2
2
132
Just solved ACME challenges for all standard ACME certificate clients you might find in an organization. No more public HTTP ports, no more DNS credentials littered around, admin says who gets a cert and who doesn't. Soon to Certify Management Hub: docs.certifytheweb.com/docs/…

Get Started with Certify Management Hub | Certify The Web Docs

Install and secure Certify Management Hub, understand its operating model, request certificates, and administer instances, security, and shared services.

docs.certifytheweb.com
1
1
58
You can use v7.x onwards of our apps to get IP address certificates where supported by the CA. Let's Encrypt currently have this feature planned and it's available though their staging API using the "shortlived" ACME profile. letsencrypt.org/2025/07/01/i…
We've Issued Our First IP Address Certificate

We've Issued Our First IP Address Certificate

Update: January 15, 2026 Six-day and IP address certificates are now generally available. See 6-day and IP Address Certificates are Generally Available for details. Since Let’s Encrypt started...

letsencrypt.org
1
54
Certify Management Hub v7.0.2 (alpha 8) is out now for Linux, Windows and docker/containers. docs.certifytheweb.com/docs/… Centralized certificate management, optionally with distributed management agents (linux & windows).

Get Started with Certify Management Hub | Certify The Web Docs

Install and secure Certify Management Hub, understand its operating model, request certificates, and administer instances, security, and shared services.

docs.certifytheweb.com
1
1
2
60
If you get an error like "The CA ACME directory was not accessible" your machine is failing to talk to the Let's Encrypt API, here's how to fix it!
Certify The Web (@certifytheweb) profile pictureCertify The Web@certifytheweb30 May 2025
If you suddenly have trouble talking to Let's Encrypt from an older (or upgraded) version of Windows using tools like Certify The Web or win-acme etc, see this: community.certifytheweb.com/…
49
Reminder that if you are using your certs for Client authentication (sometimes used as authentication for machines talking to machines) that feature is being removed from most ACME CA certs.
Certify The Web (@certifytheweb) profile pictureCertify The Web@certifytheweb15 May 2025
Let's Encrypt are discontinuing client certificates in 2026 - these are the ones you might use to authenticate a client (app etc) to a server, not traditional web server certs. letsencrypt.org/2025/05/14/e…
Ending TLS Client Authentication Certificate Support in 2026

Ending TLS Client Authentication Certificate Support in 2026

Update March 16, 2026: Thanks to some timeline changes in the root program requirements, we have been able to push back the removal of the tlsclient profile slightly. If you are already using the...

letsencrypt.org
29
We are seeing a surge in reports of problems with the ZeroSSL ACME API. status.zerossl.com/ Keep in mind that if you have multiple CA accounts configures the app can automatically fallback to a different CA: docs.certifytheweb.com/docs/…
38
Load more