Certify One SSL / TLS Certificate Auditor

Certify One is a software program designed to help you audit and validate SSL / TLS certificate chains. Web browsers have become much stricter in regard to handling SSL / TLS certificates. All major browsers will warn or even block access to sites where the SSL / TLS certificate is expired, self-signed, or revoked. Similarly, access may be blocked if the certificate chain of trust (e.g. root CA or intermediate certificates) is incorrect, certificates in the chain of trust are missing, have been revoked or are expired. Further, certificate lifespans have been reduced. Hence, it's important to be able to audit certificate validity, ensure the certificate chain is intact and test whether certificates have been revoked, have expired or are expiring. You can also use Certify One to meet specific control compliance requirements contained within various cybersecurity frameworks such as Annex A.10 controls in ISO/IEC 27001:2013 and Control DS-15.5 in the Motion Picture Association's (MPA) Content Security Best Practices. For more information please see the Certify One product page and Change Log.


1. Download


Certify One 2.0.1 64-bit / x64 / ARM64EC
December 2021 - 7-day trial

For Microsoft Windows Operating Systems


2. License

Certify One is a subscription-based product. Please follow this link to purchase your subscription. 


3. Installation

Once you have downloaded the installer, double-click the installer and follow the installation instructions.


4. Using Certify One

Populate the list of Scan Targets. Then click the "Scan All" button. You can also Schedule scans. If you double click on any host you will be provided detailed scan information. You can test Certify One with valid, expired, and revoked certificates via ssl.com or badssl.com.

Certify One Scan Targets

You will be able to see a graphical summary of the tests on the Dashboard once the scans have been completed.

Certify One Dashboard

You can also query DNS CAA records via the command line! For example:

Certify One Query DNS CAA Record

Bugs? Issues? Feature Requests?

We are actively developing Certify One. Tell us what you think! Let us know what features you would like to see in the product. All feedback is gratefully received!