Learn more about DigiCert's SSL Discovery Tool

SSL Certificate Discovery Tool Logo

SSL Discovery Tool from DigiCert is an easy and free way to find and manage all your digital certificates. You can use it to manually scan your network or a range of IP addresses, or you can set it to automatically scan your network and notify you of any changes to your list of active certificates. The SSL Certificate Discovery Tool is simple to use and provides enough features and flexibility for just about every usage scenario.

We've put together a list of some of the most frequently asked questions about the Discovery Tool to help you out. Take a look at the questions below for help using the Discovery Tool. If you're question is not answered here, feel free to contact us and we'll be happy to help you out.

Frequently Asked Questions

Find & manage your certificates -- DigiCert Discovery Tool

Get It Now


Do I need a DigiCert account to use the Discovery Tool?

No, the activation code you get through email when you request the Discovery Tool gives you full access to the tool. If you decide later to renew a certificate through the Discovery Tool and create an account with us, DigiCert will automatically tie your Discovery Tool results to your new account, avoiding any redundancy or confusion.

What are the technical requirements to use the Discovery Tool?

A PC running Windows Vista or later is recommended when using the Discovery Tool. While it may run on older versions of Windows, they are not fully supported and some features may not work as expected. The Discovery Tool is not currently compatible with Mac OS X.

Can I issue new certificates or revoke existing ones tied to a third-party CA?

The Discovery tool tracks certificates scanned within the IP range provided by the user, regardless of the issuing CA. Though the tool will show certificates and expiration dates for those issued by a CA other than DigiCert, users may only renew certificates issued by DigiCert.

Will the Discovery Tool notify me of upcoming certificate expiration and renewals?

By default you will receive an alert 7 or 30 days in advance of certificate expiration dates, or at both intervals if you choose. If you don’t want to use this feature, you can turn it off. This alert feature applies to all certificates, whether they were issued by DigiCert or another provider.

I turned on notifications in the Discovery Tool but am not receiving renewal and expiration notifications.

There are settings to receive notifications in both your DigiCert account and in the Discovery Tool. The Discovery Tool will default to the notification settings in your DigiCert account, meaning that a new certificate due for expiration will not populate in the Discovery Tool if notifications are not turned on in the account area. We recommend turning on notifications in both your account and Discovery Tool settings.

Can the Discovery Tool find SSL certificates on any platform or server?

Yes, the tool works across all platforms and can also scan non-standard certificates, if it is installed on Microsoft Windows Vista or later releases.

Can I track domain names as well with the Discovery Tool?

No, the tool is built to display a list of expiration dates with corresponding certificates due to expire on any given date. When you click on a certificate you can view key details to include the common name on the certificate.

Can the Discovery Tool identify sites NOT using SSL?

No, currently it only scans for SSL-enabled ports.

Does the Discovery Tool check if certificates and intermediates have been installed correctly?

This feature is not available in the current version.

How is DigiCert protecting sites from those who may use the Discovery Tool unethically?

Several provisions have been put in place to protect the integrity and security of sites that may be scanned. First, registrants are required to specify the number of IP addresses per port they wish to scan in any given report, with a maximum of 100, when they sign up. Second, DigiCert monitors for any suspicious activity.