I’m new to this product and trying to determine if I want to invest in it.
I currently have two wildcard certificates from GoDaddy that is used on Windows (IIS), Linux, and Oracle Servers.
Will this product replace my GoDaddy certificates?
Will this program auto-renew the cert + auto install it? How? Agents and a cert server? Will it include the .pfx, .pem, etc.?
As cert expiration/validity periods shorten, I would like an automated option instead of downloading it manually each year.
My environment is hybrid on-prem and cloud, with servers in both places.
Yes to all. The best way to get a feel for the app is to download and install it as an evaluation as that will answer a lot of your questions immediately. Evaluations are not time or feature limited.
The app doesn’t import existing certificate files, it orders new ones from your choice of CA.
The default CA is Let’s Encrypt and that’s usually fine for most organizations unless you specifically require the Entity/Organization validation provided by commercial CAs (so that your org is listed in the certificate details). You can however configure any ACME CA in the app and use that for your certificate orders/renewals.
Typically we recommend not using wildcards everywhere and instead get certs for specific services with just the domain/subdomains you really need to include. Wildcards can still be requested (using DNS domain validation) and used but they are often not really required.
For a typically organizations certificate management we’d suggest using Certify Management Hub as your way to see everything, plus Certify Certificate Manager (CCM) on Windows and Certify Management Agent (linux) to either perform renewals directly or subscribe to certs from the hub and deploy them to local services on each machine. There’s some flexibility in how you organize that. CCM and Agent are basically the same but on Windows it has a UI.
Specifically for IIS, both the hub and CCM are natively aware of IIS and can configure https bindings locally. Our app has been one of the top ways to manage IIS certificates for about 10 yrs. You install the app (usually CCM) directly to the windows server, unless you are using Centralized Certificate Store etc.
For Apache etc you generally have to set the config files yourself but the app can be configured to export the certificate files where you need them and run a deployment task to reload the target service etc. Using with Apache, nginx or Other Web Servers | Certify The Web Docs
If you go with our Power Pro bundle you get Certify Management Hub included and up to 50 installs overall (hub, CCM, agent). Enterprise bundle is up to 250, you can mix and match license keys or you can use cloud managed licensing if you want it to be dynamic, bundles are usually a little cheaper.