Skip to main content

📦 Certificate Inventory

Certificate Inventory allows you to view, manage, and organize all your certificates from a central location.

Overview​

Certificate Inventory features:

  • 📋 Centralized certificate catalog
  • 🔍 Advanced search and filtering
  • 🏷️ Tagging and grouping
  • 📊 Detailed certificate information
  • 📈 Visualization and reporting

Certificate Inventory Sources​

Certificate Inventory collects and manages certificates from different sources in one central location. Your system automatically performs certificate discovery from the following sources:

📡 Network Scanning​

Certificates discovered through automatic scanning in your infrastructure:

  • TLS/SSL certificates accessible via open ports
  • Web servers, API gateways, load balancers
  • Regular scans on specified IP ranges or domains
  • Automatic discovery on specific port ranges (443, 8443, etc.)

🌐 Certificate Transparency Logs Scanning (CT Logs)​

Certificates discovered from public certificate logs:

  • CT log scanning for domains belonging to your organization
  • Detection of incorrectly or unauthorized issued certificates
  • Monitoring all certificates issued by public CAs

✍️ Certificates Signed Through Application​

Certificates created and signed on the platform:

  • Certificates created with Certificate Signing Request (CSR)
  • Certificates signed through integrated CAs
  • Self-signed certificates
  • Internal CA certificates

📥 Imported Certificates​

Certificates manually added to the system:

  • Certificates uploaded in PEM, DER, PFX/P12 formats
  • Certificate chains transferred from external systems
  • Certificates obtained from third-party CAs

🔗 Discovered from Integration Systems​

Certificates automatically discovered through integrated systems:

  • F5 BIG-IP • Citrix NetScaler • FortiWeb
  • NGINX / NGINX Plus • Palo Alto Networks
  • Apache • IIS • Apache Tomcat
  • Windows TrustStore • Java Keystore (JKS)
  • IBM DataPower • HashiCorp Vault
Adding Integration

Visit the Integrations page to add a new integration and follow step-by-step installation instructions.

Discovered Certificates List​

What are Discovered Certificates?

This is a detailed list of all certificates found in your infrastructure as a result of Certificate Discovery operations. This list is updated after each discovery, and new certificates are automatically added.

Key Features​

The Discovered Certificates list offers powerful features that simplify certificate management:

FeatureDescription
🔍 Detailed FilteringAbility to search separately for each column
📊 Customizable ViewSelect the columns you want to see
📈 Bulk OperationsPerform the same operation on multiple certificates simultaneously
📤 ExportExport selected certificates in different formats
⚡ Quick AccessInstant access to critical information like last seen time, port, type

Provided Information​

In the certificate inventory, basic information for each certificate is presented in list view. When you click on a certificate, you can access all the details of the certificate.

Information Displayed in List View​

InformationDescription
Last SeenWhen the certificate was last seen
ServerServer address where the certificate is located
PortPort number on which the certificate is running
TypeDiscovery method (Network Scanning, CT Logs, Import, Integration, Manual)
SubjectCertificate owner information (CN, OU, O)
Not BeforeCertificate validity start date
Not AfterCertificate validity end date

Detailed View​

SecTrail CM parses certificates and stores all information. In detailed view, you can access all fields in the X.509 standard (Subject, Issuer, Serial Number, Public Key, Extensions, Fingerprint, Certificate Chain, etc.) along with discovery source, related systems, and usage history.

Bulk Operation Capabilities​

Bulk operations that can be performed from the list:

  • ✅ Change Status - Bulk update status of selected certificates
  • 📤 Export - Export selected certificates (CSV, Excel, PDF)
  • 🗑️ Delete - Clean up certificates no longer in use
  • 📋 Create Signing Request - Generate signing request (CSR) for renewal

Get Started​