Skip to content

Commit 98c18ef

Browse files
webprofusion-chriscwebprofusion-chrisc
committed
Enable blog
1 parent f1267d5 commit 98c18ef

File tree

7 files changed

+304
-4
lines changed

7 files changed

+304
-4
lines changed

‎blog/2024-12-08-acme-clients.md‎

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
---
2+
title: Comparing ACME Clients for Windows
3+
description: A detailed comparison of popular ACME clients and how they stack up against Certify The Web.
4+
slug: comparing-acme-clients
5+
authors: webprofusion-chrisc
6+
tags: [acme, certificate management, security]
7+
image: https://certifytheweb.com/images/management/summary.png
8+
hide_table_of_contents: false
9+
---
10+
11+
In the world of SSL/TLS certificate management, [ACME clients](https://acmeclients.com) play a crucial role in automating the issuance and renewal of certificates. Today, we will compare some of the most popular ACME clients, with an emphasis on Windows support: win-acme, Posh-ACME, Certbot, and Certify The Web (Certify Certificate Manager). Each of these clients has its own unique features and strengths, making them suitable for different use cases.
12+
13+
<!-- truncate -->
14+
15+
## Posh-ACME
16+
17+
### Overview
18+
Posh-ACME is a PowerShell module for managing ACME certificates. It is highly scriptable and ideal for users who prefer working with PowerShell.
19+
20+
### Key Features
21+
- **PowerShell Integration**: Leverages PowerShell for automation and scripting.
22+
- **Flexible Validation**: Supports custom challenge validation via your own scripting.
23+
- **Customizable**: Highly customizable through PowerShell scripts, allowing for complex automation scenarios.
24+
- **Cross-Platform**: Can be used on Windows, macOS, and Linux.
25+
26+
#### Pros
27+
- Highly scriptable and customizable.
28+
- Cross-platform support.
29+
- Integrates well with existing PowerShell workflows.
30+
31+
#### Cons
32+
- Requires familiarity with PowerShell.
33+
- May have a steeper learning curve for non-PowerShell users.
34+
35+
## win-acme
36+
37+
### Overview
38+
win-acme is a simple and powerful ACME client for Windows. It is designed to be easy to use and integrates well with IIS. Originally called letsencrypt-win-simple
39+
40+
### Key Features
41+
- **Simplicity**: win-acme is great if you have a few certificates to manage and don't want a full UI or extensive features.
42+
- **Ease of Use**: win-acme provides a straightforward command-line interface and a user-friendly interactive mode.
43+
- **IIS Integration**: Integrates with IIS, making it easy to manage certificates for IIS websites.
44+
- **Pluggable Validation**: Supports various validation methods, including HTTP-01, DNS-01, and TLS-ALPN-01.
45+
- **Scheduled Renewals**: Automatically schedules certificate renewals using a Windows Scheduled Task, ensuring your certificates are always up-to-date.
46+
47+
#### Pros
48+
- Simple interface.
49+
- Excellent integration with IIS.
50+
- Supports multiple validation methods.
51+
52+
#### Cons
53+
- The main developer of win-acme has moved on to simple-acme, making win-acme deprecated. Existing users are encouraged to check out https://simple-acme.com
54+
- Deployment limited to IIS or custom scripts.
55+
56+
57+
## Certbot
58+
59+
### Overview
60+
Certbot is one of the most widely used ACME clients, developed by the Electronic Frontier Foundation (EFF). It is known for its robustness and extensive documentation.
61+
62+
### Key Features
63+
- **Wide Compatibility**: Supports a wide range of web servers and operating systems.
64+
- **Automated Renewals**: Automatically renews certificates and updates web server configurations (Apache and nginx).
65+
- **Pluggable Validation**: Supports HTTP-01 and DNS-01 validation methods.
66+
67+
#### Pros
68+
- Popular on Linux.
69+
- Supports a wide range of environments (via snap install).
70+
- Strong community support.
71+
72+
#### Cons
73+
- No longer supported on Windows.
74+
- Zero IIS integration.
75+
- Command-line interface may be less user-friendly for beginners.
76+
- Requires manual configuration for some web servers.
77+
78+
## Certify The Web
79+
80+
### Overview
81+
Certify The Web is a comprehensive ACME client designed for Windows. It provides a graphical user interface (GUI) and integrates seamlessly with IIS and includes built in Deployment Task support for various web servers and services. It also includes a centralized dashboard option, commercial support and multi-instance management via the upcoming **Certify Management Hub** product.
82+
83+
![Certify Management Hub](https://certifytheweb.com/images/screens/landing_page.png)
84+
85+
### Key Features
86+
- **User-Friendly GUI**: Intuitive graphical interface for managing certificates.
87+
- **IIS and Beyond**: Supports IIS, Apache, Nginx, and other web servers.
88+
- **Automated Renewals**: Automatically renews certificates and updates web server configurations.
89+
- **DNS Validation**: Supports DNS-01 validation with many DNS providers. Certify even includes many providers from the Posh-ACME project.
90+
- **Advanced Features**: Includes features like deployment tasks, scripting, and reporting.
91+
- **Dashboard and Status Reporting**: Includes unique zero-config status reporting ensuring you are notified of renewal failures before they become a real problem.
92+
93+
#### Pros
94+
- Easy-to-use graphical interface.
95+
- Supports a wide range of web servers and validation methods.
96+
- Advanced features for complex scenarios.
97+
- Used by hundreds of thousands of organizations around the world.
98+
- Commercial support available by purchasing a license key.
99+
100+
#### Cons
101+
- Currently limited to Windows environments, but a new web based Certify Management Hub app will be available soon.
102+
- Command line options are more limited that other command line native apps
103+
104+
## Conclusion
105+
106+
Each of these ACME clients has its own strengths and is suitable for different use cases. Obviously we think Certify Certificate Manager is an excellent choice for Windows users, offering a comprehensive feature set, commercial support and a user-friendly GUI. Posh-ACME is ideal for PowerShell enthusiasts who need a highly scriptable solution, win-acme is great for users who prefer the command line, while Certbot is a robust and widely known option (on Linux).
107+
108+
Ultimately, the best ACME client for you will depend on your specific needs and environment. We encourage you to explore these options and choose the one that best fits your requirements.

‎blog/2025-01-17-acme-profiles.md‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
---
2+
title: Draft support for ACME Profiles
3+
description: ACME profiles draft implementation
4+
slug: acme-profiles-draft
5+
authors: webprofusion-chrisc
6+
tags: [acme, certificate management, security]
7+
image: https://certifytheweb.com/images/management/summary.png
8+
hide_table_of_contents: false
9+
---
10+
11+
We have implement support for the ACME Profiles extension, a new feature designed to enhance the Automated Certificate Management Environment (ACME) protocol. This extension allows ACME Servers to offer a selection of different certificate profiles to ACME Clients, making it easier for clients to request the specific type of certificate they need.
12+
13+
<!-- truncate -->
14+
15+
ACME Profiles are a new proposed extension to the ACME standard allows CAs to offer certificates with different features depending on user preferences.
16+
17+
https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/
18+
19+
This feature will be available in the next major release of Certify Certificate Manager and Certify Management Hub.
20+
21+
## What are ACME Profiles?
22+
23+
ACME Profiles provide a way for Certificate Authorities (CAs) to advertise the different types of certificates they can issue. For example, a CA might offer a certificate with a shorter lifetime and different key usage constraints. By selecting a profile, clients can ensure they receive a certificate that meets their specific requirements.
24+
25+
## Key Features
26+
27+
### Improved Flexibility
28+
ACME Profiles make it easier for CAs to introduce new and improved certificate types. Clients can quickly adopt these new profiles without needing to change their existing workflows or configurations.
29+
30+
### Enhanced Security
31+
By moving profile selection out of the CSR and into the ACME protocol, ACME Profiles reduce the risk of compliance incidents caused by incorrect or malicious CSR values. This helps ensure that certificates are issued according to the CA's policies and standards.
32+
33+
## How It Works
34+
35+
### Server Advertisements
36+
ACME Servers that support profiles will include a new `profiles` field in their Directory object. This field lists the available profiles and provides human-readable descriptions or URLs to documentation.
37+
38+
### Client Requests
39+
When creating a new Order, clients can specify the desired profile in the `profile` field of the Order object. The server will then issue a certificate that matches the selected profile.
40+
41+
In **Certify Certificate Manager** and **Certify Management Hub** this will be available as an option under under *Certificate > Advanced > Certificate Authority*.
42+
43+
## Current Implementations
44+
Let's Encrypt's Boulder ACME Server software fully implements the ACME Profiles extension. Although profiles are not yet configured in Let's Encrypt's Production and Staging environments, the Pebble ACME Server testbed also supports this extension.
45+
46+
## Conclusion
47+
The ACME Profiles extension is a significant step forward in providing flexibility and preferences in automated certificate management. By allowing clients to select predefined profiles, it reduces complexity, enhances security, and provides greater flexibility for both clients and CAs.
48+
49+
We encourage you to explore the ACME Profiles feature when it becomes available and provide feedback to help us continue improving this important protocol.

‎blog/2025-02-08-management-hub.md‎

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
---
2+
title: Introducing Certify Management Hub
3+
description: Introducing Certify Management Hub
4+
slug: introducing-management-hub
5+
authors: webprofusion-chrisc
6+
tags: [certify, news, management-hub]
7+
image: https://certifytheweb.com/images/management/summary.png
8+
hide_table_of_contents: false
9+
---
10+
11+
We are excited to introduce our upcoming tool designed to simplify and streamline your certificate management process. **Certify Management Hub** is a centralized platform that allows you to manage all your SSL/TLS certificates from a single interface. Whether you are handling certificates for a small business or a large enterprise, the Management Hub provides the tools you need to ensure your certificates are always up-to-date.
12+
13+
![Certify Management Hub](https://certifytheweb.com/images/management/summary.png)
14+
15+
<!-- truncate -->
16+
17+
## What is Certify Management Hub?
18+
19+
Certify Management Hub provides a single view of all of your managed certificates across your organizations. You can optionally centrally renew certificates or delegate certificate renewals to individual Certify Certificate Manager (and compatible agents). Existing Certify Certificate Manager users can use the management hub to see and manage certificates across hundreds of servers.
20+
21+
## Key Features
22+
23+
### Centralized Management
24+
With the Certify Management Hub, you can view and manage all your certificates in one place. This eliminates the need to log into multiple systems and simplifies the management process.
25+
26+
### Automated Renewals
27+
Never worry about expired certificates again. The Management Hub automates the renewal process, ensuring that your certificates are always valid and up-to-date.
28+
29+
### Detailed Reporting
30+
Get detailed reports on the status of your certificates, including upcoming expirations and renewal logs. This helps you stay on top of your certificate management and avoid any potential issues.
31+
32+
### Managed (DNS) Challenges
33+
Optionally centralize the configuration of DNS challenges and let compatible ACME clients use the management hub API to request DNS validation updates on their behalf. This removes the need to distribute sensitive DNS API credentials over many servers.
34+
35+
## Simple Upgrade
36+
37+
Getting started with the Certify Management Hub is easy if you are an existing Certify Certificate Manager users. Update your app version to the latest release that supports Certify Management Hub, then tell the app the URL of the Management Hub and joining key.
38+
39+
## Join the Beta
40+
41+
We are currently accepting beta testers for the Certify Management Hub. If you are interested in participating, please let us know via email at `support at certifytheweb.com`. Your feedback and feature requests will help us refine the product and ensure it meets your needs.
42+
43+
## Conclusion
44+
45+
The Certify Management Hub is designed to make certificate management simple, efficient, and secure. We are excited to bring this new tool to our users and look forward to your feedback. Stay tuned for more updates and features as we continue to develop and improve the Management Hub.
46+
47+
Thank you for your continued support!

‎blog/2025-02-08-renewal-monitoring.md‎

Lines changed: 80 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,80 @@
1+
---
2+
title: Certificate Renewal Monitoring Options
3+
description: Tracking large numbers of certificates can get complicated. Learn about the various options available.
4+
slug: renewal-monitoring
5+
authors: webprofusion-chrisc
6+
tags: [certify, news, management-hub, dashboard]
7+
8+
---
9+
10+
Managing SSL/TLS certificates can be a daunting task, especially when dealing with a large number of certificates across multiple domains and servers. Ensuring that certificates are successfully renewed on time is crucial to maintaining the security and trustworthiness of your websites and services.
11+
12+
Recently Let's Encrypt in particular have announced they will no longer send expiry notification emails, leaving end-users wondering how best to keep track.
13+
14+
In this article, we will explore various options for certificate renewal monitoring tools, including RedSift and Certify Dashboard, and how they compare.
15+
16+
<!-- truncate -->
17+
18+
## RedSift
19+
20+
### Overview
21+
RedSift is a cybersecurity platform that offers a range of tools for managing and monitoring digital certificates. Their certificate monitoring solution helps organizations keep track of their SSL/TLS certificates and ensures timely renewals.
22+
23+
### Key Features
24+
- **Automated Monitoring**: Continuously monitors your certificates and alerts you to upcoming expirations.
25+
- **Detailed Reporting**: Provides comprehensive reports on the status of your certificates, including expiration dates and renewal history.
26+
- **Integration**: Integrates with various platforms and services to provide a seamless monitoring experience.
27+
- **Security Alerts**: Notifies you of any security issues related to your certificates, such as weak encryption or misconfigurations.
28+
29+
### Pros
30+
- Comprehensive monitoring and reporting features.
31+
- Integration with multiple platforms.
32+
- Security alerts for potential issues.
33+
34+
### Cons
35+
- May require a learning curve to fully utilize all features.
36+
- Pricing may be a consideration for smaller organizations.
37+
- Only tracks certificate issuance, not ACME client renewal attempts.
38+
39+
## Certify Dashboard
40+
41+
### Overview
42+
Certify Dashboard is a hosted service designed to simplify and streamline the monitoring of SSL/TLS certificate renewals. It integrates seamlessly with Certify Certificate Manager and other ACME clients, providing a centralized platform for managing your certificates.
43+
44+
Certify Dashboard is unique in that it is not a Certificate Transparency Log monitor, it doesn't just track certificate issuance, its shows attempted renewals and potentially their associated failures.
45+
46+
### Key Features
47+
- **Centralized Management**: View and manage all your certificates from a single interface.
48+
- **Automated Renewals**: Automatically tracks and reports on certificate renewals, ensuring they are always up-to-date.
49+
- **Detailed Reporting**: Get detailed reports on the status of your certificates, including upcoming expirations and renewal history.
50+
- **Integration with ACME Clients**: Works with popular ACME clients like Certbot and acme.sh, making it easy to incorporate into your existing workflow.
51+
- **Secure and Reliable**: Uses industry-standard encryption and security practices to protect your certificates and data.
52+
53+
### Pros
54+
- User-friendly interface for managing certificates.
55+
- Seamless integration with Certify Certificate Manager and other ACME clients.
56+
- Automated tracking and reporting of certificate renewal attempts.
57+
58+
### Cons
59+
- Limited to environments that support ACME clients.
60+
- Some advanced features may require a paid license.
61+
62+
## Comparison
63+
64+
### Ease of Use
65+
Certify Dashboard offers a user-friendly interface that simplifies the process of managing and monitoring certificates. RedSift, while comprehensive, may require a learning curve to fully utilize all its features.
66+
67+
### Integration
68+
Both RedSift and Certify Dashboard offer integration with various platforms and services. However, Certify Dashboard's seamless integration with Certify Certificate Manager and other ACME clients makes it a more straightforward choice for users already utilizing these tools.
69+
70+
### Reporting and Alerts
71+
Both tools provide detailed reporting and alerts for upcoming certificate expirations. RedSift also offers security alerts for potential issues, which can be a valuable feature for organizations concerned about certificate-related security risks.
72+
73+
### Pricing
74+
Pricing can be a consideration for smaller organizations. Certify Dashboard will offer a free tier for managing up to 250 certificates, making it an attractive option for smaller setups. RedSift's pricing may be higher, but it offers a broader range of cybersecurity tools beyond certificate monitoring.
75+
76+
## Conclusion
77+
78+
Both RedSift and Certify Dashboard provide robust solutions for monitoring SSL/TLS certificate renewals. The choice between them will depend on your specific needs and existing infrastructure. Certify Dashboard is an excellent choice for users looking for a straightforward, integrated solution with Certify Certificate Manager and other ACME clients. RedSift, on the other hand, offers a more comprehensive cybersecurity platform with additional features and integrations.
79+
80+
We encourage you to explore both options and choose the one that best fits your requirements. Ensuring timely certificate renewals is crucial for maintaining the security and trustworthiness of your websites and services.

‎blog/authors.yml‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
webprofusion-chrisc:
2+
name: Christopher Cook
3+
title: Lead Developer of Certify The Web
4+
url: https://github.com/webprofusion-chrisc
5+
image_url: https://avatars.githubusercontent.com/u/2445502?v=4
6+
socials:
7+
x: webprofusion
8+
github: webprofusion-chrisc

‎docusaurus.config.js‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,10 +23,12 @@ module.exports = {
2323
src: 'img/logo.svg',
2424
},
2525
items: [
26+
2627
{ to: 'docs/intro', label: 'Certify Certificate Manager', position: 'left' },
2728
{ to: 'docs/dashboard/', label: 'Certify Dashboard', position: 'left' },
2829
{ to: 'docs/dns/providers/certifydns/', label: 'Certify DNS', position: 'left' },
2930
{ to: 'docs/support', label: 'Support', position: 'left' },
31+
{ to: 'blog', label: 'Blog', position: 'right' },
3032
{
3133
href: 'https://community.certifytheweb.com',
3234
label: 'Community',

‎src/css/custom.css‎

Lines changed: 10 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,15 +6,21 @@
66

77
/* You can override the default Infima variables here. */
88
:root {
9-
--ifm-color-primary: #25c2a0;
10-
--ifm-color-primary-dark: rgb(33, 175, 144);
9+
10+
--ifm-color-primary: #002809;
11+
--ifm-color-primary-dark: rgb(33, 175, 85);
1112
--ifm-color-primary-darker: rgb(31, 165, 136);
12-
--ifm-color-primary-darkest: rgb(26, 136, 112);
13+
--ifm-color-primary-darkest: rgb(26, 136, 63);
1314
--ifm-color-primary-light: rgb(70, 203, 174);
1415
--ifm-color-primary-lighter: rgb(102, 212, 189);
1516
--ifm-color-primary-lightest: rgb(146, 224, 208);
1617
--ifm-code-font-size: 95%;
1718
}
19+
h2.title_f1Hy{
20+
font-size: 2rem;
21+
font-weight: 400;
22+
margin-bottom: 1rem;
23+
}
1824

1925
.docusaurus-highlight-code-line {
2026
background-color: rgb(72, 77, 91);
@@ -53,4 +59,4 @@
5359

5460
.markdown .clear-float {
5561
clear:both;
56-
}
62+
}

0 commit comments

Comments
 (0)