Web RA Server – Certificate Locator

Avoid costly outages, strengthen security, and simplify compliance with complete, centralised digital certificate lifecycle management

Why use Ascertia’s
Certificate Locator?

The Web RA Server Certificate Locator streamlines certificate discovery and management by scanning network hosts, Windows stores, and Java key stores, consolidating results into centralised reports for complete visibility. It ensures proactive lifecycle management by assigning certificates to owners for timely expiry notifications and automating renewals with external Certification Authorities (CAs), eliminating manual tasks and reducing errors.

Designed for compliance and flexibility, the solution generates detailed reports for audits and identifies non-compliant certificates with advanced filtering. Available as an on-premises or SaaS deployment, it integrates seamlessly with leading CAs, adapting to diverse IT environments for efficient, scalable certificate management.

Certificate Locator Diagram

Leverage the essential tools you need for certificate lifecycle management

Server Downtime Icon

Reduce system outages due to expired certificates

Certificate Notification Icon

Automate expiry and reporting notifications

Certificate Policy Icon

Reduce policy violations

Delete Certificate Icon

Eliminate untrusted self‑signed certificates

ADSS Server Modules Diagram

Key Benefits

  • Complete compliance

    – Ascertia’s Web RA Certificate Locator enables you to easily track down certificates that aren’t compliant with corporate policy. From within the intuitive web portal, you can find and report on certificates that are not from corporate approved suppliers and ensure certificates are compliant with International standards, CA/Browser baseline requirements for TLS, and leading certificate programs.

  • Streamline Reporting

    – Our software lets you easily scan networks, Microsoft certificates stores, or Java key stores for all types of certificates. You can then create reporting filters and automate your reporting. This reduces administrative burden while ensure your team are aware and accountable.

  • Effortless deployment

    – Certificate Locator can be easily deployed as a standalone product enabling you to locate, report and notify certificate owners when a certificate is due to expire or if a policy violation is detected. Alternatively, you can combine this with ADSS Server’s external certificate authority (CA) connectors for full lifecycle management.

Designed to simplify enrolment and workflow to enable electronic know-your-customer checks, WebRA can address simple enrolment in vetting use cases and automatically enable lesions of digital certificates in a single workflow. Web RA server helps reduce cost, increase user satisfaction, and easily be integrated into an existing deployment to meet the needs of most businesses looking to introduce enrolment and vetting.

Mike Hathaway

Chief Product Officer

Ascertia

Who benefits from the Web RA Server Certificate Locator?

The Web RA Server Certificate Locator is built to support businesses with varying and complex certificate needs, making it an ideal solution for several key groups.

For enterprises operating within intricate IT environments, this tool simplifies the challenge of managing certificates across diverse systems, locations and teams. By centralising certificate discovery and management, it eliminates blind spots, streamlines operations and ensures a consistent security posture across the organisation.

Regulated industries, such as finance, healthcare and government, benefit greatly from the Web RA Server Certificate Locator’s robust compliance features. The solution helps these businesses meet stringent industry standards and regulatory requirements by automating reporting, identifying non-compliant certificates and proactively managing renewals to avoid penalties or reputational damage.

Businesses aiming to improve efficiency and strengthen security can also rely on the Web RA Server Certificate Locator. By automating time-consuming manual tasks, it frees IT resources to focus on strategic initiatives while reducing the risk of errors that lead to outages or vulnerabilities. Whether you are a small business or large enterprise, this solution delivers the tools needed to operate securely, efficiently and in full compliance with your industry’s demands.

Watch Ascertia’s Success Stories

Ascertia’s products and solutions are used extensively by governments, leading financial institutions, global telcos and thousands of major corporations and SMEs around the world.

Visit our YouTube channel

FAQs

How does Certificate Locator work?

Ascertia Certificate locator is formed of two parts:

  1. The Certificate Locator Scanner, the scanner is a simple tool that enables users to scan:
    1. Windows Certificates stores of users and computers
    2. Java key stores
    3. Servers connected to the network

    The certificate locator scanner will scan for certificates and then either send the results automatically to Web RA, or provide a set of results in a file that can be manually imported into Web RA.
    A deployment can have many certificate locator scanners thought out the network all sending results back to a central instance of Web RA.

  2. Web RA has new modules to enable results to be centrally displayed, administrators, can then easily assign certificates that have been found to owners who will then receive expiry and compliance notifications.Web RA administrators can also provide the ability to manage certificates that have been found via a connection to a CA and one of Web RA’s many certificate management protocols, SCEP, EST, CMP, and ACME.

How does Certificate Locator help with reporting?

Web RA has a new reporting module, administrators can create advanced filters from the Certificate Locator module, that can then be saved as a report that can be run on a regular scheduled basis. This will enable administrators to be notified about certificates with certain characteristics:

  1. Certain key sizes
  2. Certain algorithms
  3. Certificates issued by a certain CA

How can Certificate Locator help with compliance issues?

Web RA Certificate Locator Reporting also enables administrators to perform reporting and notification on certificate non-compliance issues, using certificate linting tools, administrators can report on all certificates that are not compliant with:

  • The Apple Certificate Transparency Program
  • CA/Browser Forum Baseline Requirements
  • CA/Browser Forum Extended Validation Requirements
  • CA/Browser Forum S/MIME Requirements
  • Mozilla Root Program
  • An other Internet PKI RFC’s 5280, 5480, 5891