Encryption Consulting has released CertSecure Manager v3.3, which automates zero-touch certificate renewal across all major enterprise server platforms and extends CA support to 11 providers, including Google Public CA and AWS.

Certificate-related outages can cost enterprises millions in unplanned downtime, and expired or misconfigured certificates often cause serious security incidents. CertSecure Manager v3.3 closes both gaps, removing the manual steps that introduce costly renewal errors.

“With v3.3, we have made zero-touch certificate renewal a reality across every major server platform, and paired that with automated risk intelligence so security teams know exactly which certificates pose a threat before an incident ever occurs,” said Puneet Singh, Principal, Encryption Consulting. “Certificate-related outages and blind spots should be a thing of the past.”

What’s new in v3.3

Zero-touch renewal across all major web, load balancer and database platforms: Automated renewal agents now cover Apache, Nginx, IIS, F5, Citrix NetScaler, JBoss EAP, Wildfly, MongoDB, Oracle DB and MSSQL Server. No human intervention is required at renewal time, eliminating the class of outages caused by missed or failed manual renewals.

Google Public CA integration: CertSecure Manager v3.3 is among the first CLM platforms to deliver native lifecycle management for Google Public CA. Combined with existing support for Microsoft AD CS, Digicert, Entrust, EJBCA, HashiCorp Vault and AWS Public and Private CA, the platform now covers 11 CAs from a unified console, giving organizations the flexibility to add CA licenses as needed without depending on a single provider.

Certificate risk profile engine: Every certificate in the inventory is automatically classified for risk, based on key strength, algorithm and validity period, giving security teams a prioritized view of exposure without manual audits.

ServiceNow store app: CertSecure Manager is now available directly in the ServiceNow Store, and integrates with Splunk SIEM, embedding certificate lifecycle management directly into the organization’s IT and security operations tools.

Certificate trust chain visualization: Administrators can now view and download the full certificate chain relationship directly in the CertSecure UI without external tooling, reducing investigation time during incidents.

Expanded discovery: AWS Cloud Discovery, IIS CCS Store Discovery, container discovery and vault discovery close inventory blind spots across cloud and on-premises environments. Third-party certificate container ingestion ensures that no certificate goes untracked.

Bulk operations and infrastructure observability: Bulk Revocation and Bulk Ownership Transfer reduce operational effort during organizational changes or large-scale certificate incidents. New System Metrics Monitoring provides real-time CPU, disk and RAM data per CertSecure component from within the CLM dashboard.

Ansible ACME desired state management: Infrastructure-as-code teams can enforce certificate compliance automatically through the Ansible ACME module, integrating CLM directly into DevOps pipelines without added tooling.