SSL Certificate Manager for Windows, powered by Let's Encrypt
Clone or download
Pull request Compare This branch is 5 commits ahead, 61 commits behind webprofusion:master.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.

Certify The Web - SSL Manager UI for Windows

The SSL/TLS Certificate Management GUI for Windows, powered by Let's Encrypt, allowing you to generate and install free SSL certificates for Windows/IIS (with automated renewal).

MIT License Stars

Certify App Screenshot


  • Windows Server 2008 R2 SP1 or higher (.Net 4.6.2 or higher), 64-bit


  • Easy certificate requests & automated SSL bindings
  • Preview mode to see which actions the app will perform (which bindings will be added/updated)
  • Auto renewal using background service, with configurable renewal frequency
  • SAN support (multi-domain certificates)
  • Support for v2 of the Let's Encrypt API including Wildcard Certificate support (*
  • Optional Pre/Post request powershell scripting for advanced deployment (Exchange, RDS, multi-server etc)
  • Web Hook support for custom reporting.
  • Http or DNS challenge validation.
    • Built-in Http Challenge Server for easier configuration of challenge responses
    • DNS Validation via supported APIs (including Azure DNS, Alibaba Cloud, AWS Route53, Cloudflare, DnsMadeEasy, GoDaddy), OVH, SimpleDNSPlus
  • Stored Credentials (API access keys etc. protected by the Windows Data Protection API)

Quick Start (IIS users)

  1. Download from and install it.
  2. Click 'New Certificate', optionally choose your IIS site (binding hostnames will be auto detected, or just enter them manually). Save your settings and click 'Request Certificate'
  3. All done! The certificate will renew automatically.

Advanced users can explore the different validation modes, deployment modes and other advanced options.

Development & Bug Reporting

If you have a bug or feature and you can fix the problem yourself please just:

  1. File a new issue
  2. Fork the repository
  3. Make your changes
  4. Submit a pull request, detailing the problem being solved and testing steps/evidence

If you cannot provide a fix for the problem yourself, please file an issue and describe the fault with steps to reproduce.


You can help translate the app by cloning the repo and installing ResXManager to easily update translation text:

Developer Build/Run Requirements:

  • Visual Studio 2017 Community Edition (or higher)
  • A local instance of IIS installed (for http validation, not required for DNS validation).
  • Restoring NuGet packages using "Update-Package -reinstall" can be useful where nuget restore fails.
  • The UI needs the background service to be running. You can configure Visual Studio to launch both the Certify.UI project and the Certify.Service project via Solution > Properties > Multiple Startup Projects

Note: For development you will require a publicly accessible IP mapped to the domain/subdomain you want to test with. The Let's Encrypt service will need to be able to access your test site remotely via HTTP in order to complete authorisation challenges. The app consists of a UI and background service. The background service must be running for the UI to operate.

support {at}