CertAlert as a Discovery Agent for CertCentre

CertAlert can now be run as the discovery agent for our CertCentre product. If you have a CertCentre account, you can add your CertCentre account details to CertAlert and the results from CertAlert scans will be automatically sent to your CertCentre account.

From the CertCentre dashboard you can quickly get an understanding of your entire certificate population and drill down to get more information about specific SSL certificates and SSL endpoints as required.

CertCentre Datasheet

CertCentre is a SAAS or on-premises solution.

If you would like to try out CertAlert or CertCentre please email info@redkestrel.co.uk.

— Phil

 

 

 

 

New Version of CertAlert Available

A new version of CertAlert is available and has the following changes/fixes:

* If the server terminates the connection during TLS handshake, tries again with SSLv3
* Fixed a problem with SMTP STARTTLS support
* Improved error message if run CertAlert when the CSV report is open
* Added a column for IP Address
* Reduced the default number of concurrent connections

CertAlert is pure .NET, completely portable, and doesn’t require an install.

To run it, just follow these 3 simple steps:

1. unzip the file you downloaded

2. open a command prompt in the folder you unzipped to

3. type CertAlert.exe and press return
(it is preconfigured to check some public websites)

The README file has details on how to configure CertAlert. It covers:
scan speed, emailing alerts, emailing reports, warning interval, IP
ranges, port ranges etc.

More information about CertAlert can be found at the links below:
http://redkestrel.co.uk/products/certalert/faq/
http://redkestrel.co.uk/products/certalert/more-info

– Phil

New Reporting Features For CertAlert

A new release of CertAlert is available. This version, in addition to providing a detailed CSV formatted report, creates a PDF formatted report that identifies the following certificate issues:

• Self Signed Certificates

• Short Key Certificates

• MD5 Certifictaes

• Expiring Certificates

• Expired Certificates

If you would like to see any other information included in the report please let us know.

— Phil

 

 

New Release of CertAlert

Just a quick post to let you know that we have released CertAlert v1.9.5078

Changes include:

* Built with .NET 2.0 rather than .NET 4.0
* Made report fields/columns configurable
* Tests to demonstrate Server Name Indication (SNI) support
* Removed sqlite code and libraries as no longer needed

— Phil

Monitoring your CRLs

We all know that an expired certificate can cause many problems and potentially financial loss for your business. Helping to ensure your certificates are correct and haven’t expired is the reason we developed CertAlert. Another important part to keeping your SSL enabled applications and services running smoothly is to also ensure that your CRLs are available and haven’t expired. Red Kestrel’s CrlMonitor automatically keeps an eye on your CRLs for you. It is easy to use and can be setup in just a few minutes. Once configured, CrlMonitor will send email alerts in any of the following scenarios:

• a CRL is not fresh
• a CRL is not available
• a CRL is corrupted

Read more about CrlMonitor and get a free trial.

— Phil

Cert Centre now supports bulk import of certificates using a hostnames file

For some time now, CertCentre has let you bulk import PEM formatted certificates via a file or a CertAlert report. Now you can also upload a list of hostnames that you want to track. This should make tracking your SSL certificates even easier. Don’t hesitate to contact us if you would like to see any other features in CertCentre; we love getting feedback.

–Phil

SSL Certificate Discovery Now Even Faster

We have released a new verion of CertAlert that makes certificate discovery even faster. Please give it a try and let us know what you think.

— Phil

Discover and Monitor SSL Certificates Used With STARTTLS SMTP

CertAlert will find and monitor certificates used to secure HTTPS, SMTPS, LDAPS, POP3S etc. It will now also discover and monitor SSL/TLS certificates used with the STARTTLS SMTP extension as described in RFC 3207. See this new article we’ve just put up: Checking STARTTLS SMTP Certificates With CertAlert for more details.

— Phil

SSL Checker: How to specify the port number when checking a host

The SSL certificate you want to check may not always be on the default https port of 443. For example, you may wish to check your LDAP server’s certificate on port 636. SSL Checker now allows you to specify the port by using any of the following formats:

• http://imap.aol.com:993
• imap.aol.com:993
• http://www.amazon.com (will use the default 443 port)

Please don’t hesitate to ask if you would like to see other features added to SSL Checker.

–Phil

Updated Certificate Discovery and Monitoring Tool

Just to let you know, we’ve made some updates recently to the SSL Certificate Discovery and Monitoring tool. These include:

•     Pre Check option which can speed up the discovery phase
•     Including the certificate in reports is now configurable
•     Tidied up some configuration settings

If you would like to try it out, please drop us an email at info@redkestrel.co.uk.

— Phil