CertAlert as a Discovery Agent for CertCentre

CertAlert can now be run as the discovery agent for our CertCentre product. If you have a CertCentre account, you can add your CertCentre account details to CertAlert and the results from CertAlert scans will be automatically sent to your CertCentre account.

From the CertCentre dashboard you can quickly get an understanding of your entire certificate population and drill down to get more information about specific SSL certificates and SSL endpoints as required.

CertCentre Dashboard

CertCentre Datasheet

CertCentre is a SAAS or on-premises solution.

If you would like to try out CertAlert or CertCentre please email info@redkestrel.co.uk.

— Phil





Posted in Uncategorized

New Version of CertAlert Available

A new version of CertAlert is available and has the following changes/fixes:

* If the server terminates the connection during TLS handshake, tries again with SSLv3
* Fixed a problem with SMTP STARTTLS support
* Improved error message if run CertAlert when the CSV report is open
* Added a column for IP Address
* Reduced the default number of concurrent connections

CertAlert is pure .NET, completely portable, and doesn’t require an install.

To run it, just follow these 3 simple steps:

1. unzip the file you downloaded

2. open a command prompt in the folder you unzipped to

3. type CertAlert.exe and press return
(it is preconfigured to check some public websites)

The README file has details on how to configure CertAlert. It covers:
scan speed, emailing alerts, emailing reports, warning interval, IP
ranges, port ranges etc.

More information about CertAlert can be found at the links below:

– Phil

Posted in Uncategorized

New Reporting Features For CertAlert

A new release of CertAlert is available. This version, in addition to providing a detailed CSV formatted report, creates a PDF formatted report that identifies the following certificate issues:

  • Self Signed Certificates
  • Short Key Certificates
  • MD5 Certifictaes
  • Expiring Certificates
  • Expired Certificates

If you would like to see any other information included in the report please let us know.

— Phil



Posted in Uncategorized

New Release of CertAlert

Just a quick post to let you know that we have released CertAlert v1.9.5078

Changes include:

* Built with .NET 2.0 rather than .NET 4.0
* Made report fields/columns configurable
* Tests to demonstrate Server Name Indication (SNI) support
* Removed sqlite code and libraries as no longer needed

— Phil

Posted in Uncategorized

Monitoring your CRLs

We all know that an expired certificate can cause many problems and potentially financial loss for your business. Helping to ensure your certificates are correct and haven’t expired is the reason we developed CertAlert. Another important part to keeping your SSL enabled applications and services running smoothly is to also ensure that your CRLs are available and haven’t expired. Red Kestrel’s CrlMonitor automatically keeps an eye on your CRLs for you. It is easy to use and can be setup in just a few minutes. Once configured, CrlMonitor will send email alerts in any of the following scenarios:

  • a CRL is not fresh
  • a CRL is not available
  • a CRL is corrupted

Read more about CrlMonitor and get a free trial.

— Phil

Posted in Uncategorized

Cert Centre now supports bulk import of certificates using a hostnames file

For some time now, CertCentre has let you bulk import PEM formatted certificates via a file or a CertAlert report. Now you can also upload a list of hostnames that you want to track. This should make tracking your SSL certificates even easier. Don’t hesitate to contact us if you would like to see any other features in CertCentre; we love getting feedback.


Posted in Uncategorized

SSL Certificate Discovery Now Even Faster

We have released a new verion of CertAlert that makes certificate discovery even faster. Please give it a try and let us know what you think.

— Phil

Posted in Uncategorized