Certify SSL Manager manage free https certificates for IIS

News: tls-sni-01 disabled, planned wildcard domain support, DNS validation Read More..

The SSL Certificate Manager for Windows, powered by Let's Encrypt

Easily install and auto-renew free SSL/TLS certificates from letsencrypt.org for your IIS server. Setting up https has never been easier.

The app is free for up to 5 managed sites per server. If you want to manage more than 5 sites (or you just want to support development) you can purchase an upgrade key. Special terms may apply for OSS project contributors and registered charities (discretionary and applies to charities with less than $1M USD of annual funding/income per your most recent financial year).

Certify SSL Manager is used by more than 70,000 people and organisations around the world, including:



Latest stable release
Download 3.0.11

Digitally Signed as Publisher 'Webprofusion Pty Ltd'
File SHA256 as generated by certutil -hashfile SHA256: 10d05d611e3606d48301b48e6d22d793122ef4bc4f17cf69957697dfb0113710

Privacy Policy

View Release History

Having trouble with certificates? See our FAQ

V3.0.11: Released 2018/01/25
  • Fix for 'ghost' certificate bindings when using specific IP with SNI
  • Fix for installer not updating app files every time
  • tls-sni-01 no longer available as Let's Encrypt challenge type for new certs
  • Minor fixes & text updates
V3.0.10: Released 2018/01/06
  • Faster UI changing between managed sites
  • Invalid domains now filtered from new cert bindings
  • Minor fixes, logging updates
V3.0.9: Released 2017/12/22
  • Add warning when adding fixed IP SNI bindings (All Unassigned is recommended alternative)
  • Add CertificateThumbprintHash to Powershell output
  • Minor fixes
V3.0.7 & 3.0.8: Released 2017/12/16
  • Fix config check logic to allow for proxy API outages
  • V3.0.8: Add optional auto download and checksum/signature verification of updates

Please backup your c:\programdata\certify\ folder before updating to v3.x, if upgrading from 2.x.


Latest beta release

The beta version of v4.0 is out now, with support for Let's Encrypt v2 API, Wildcard Domains and DNS validation.

If you are interesting in testing the new version, see here for more details : Join the beta


This software is provided "as is", without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages or other liability, whether in an action of contract, tort or otherwise, arising from, out of or in connection with the software or the use or other dealings in the software.

Got feedback?
Email Us or file issues on GitHub

Note: Our app is Open Source (https://github.com/webprofusion/certify). Amongst other libraries it uses the awesome ACMESharp library project by Eugene Bekker and ACMESharp contributors, which is licensed under MPL 2.0