Certificate Inspector helps security professionals inventory, identify, and fix vulnerabilities in their SSL Certificate installations and server endpoint configurations
LEHI, UT (April 2, 2015) — The DigiCert Certificate Inspector™ has been named a finalist in the Info Security Products Guide’s 11th Annual Global Excellence Awards program for Best Vulnerability Assessment, Remediation and Management Solution. This year’s winners will be announced at the annual awards dinner, held on April 20 in San Francisco, in conjunction with the start of the annual RSA conference.
“DigiCert is honored by this recognition of our continued efforts to work with our enterprise customers to help them more simply and securely manage the SSL certificate management lifecycle,” said DigiCert CSO Jason Sabin. “The DigiCert Certificate Inspector helps enterprises identify and inventory SSL Certificates on internal and external networks, and fix potential vulnerabilities caused by expired certificates, poor cipher suite configuration on their servers, or potentially outdated practices such as the use of SHA-1 or SSL 3 and earlier protocols.”
Continued Sabin, “Today’s security professionals manage hundreds, if not thousands, of certificates across their network and many times work in disparate physical locations. Certificate Inspector provides real-time insight into SSL deployment and configuration on both external and internal networks to help administrators optimize their certificate landscape.”
Recently upgraded to flag servers vulnerable to FREAK, the DigiCert Certificate Inspector uses smart sensors to discover and analyze SSL Certificates and servers across both internal- and external-facing networks to find problem areas and help administrators fix them. Certificate Inspector helps organizations close the gap between certificate procurement and secure certificate deployment in many ways, including:
- Establishing their security baseline with a real-time, comprehensive overview of SSL/TLS certificates and their termination endpoints across the entire network.
- Detecting vulnerabilities via scanning for problematic certificates or server configurations and easily reviewing results using Certificate Inspector’s intuitive dashboard.
- Analyzing security data points either by aggregate or specific to each certificate and endpoint.
- Mitigating discovered vulnerabilities, such as BEAST and FREAK, and lack of compliance with industry guidelines such as the CA/Browser Forum Baseline Requirements, through recommended steps.
- Renewing expiring certificates through DigiCert’s express provisioning process.
- Archiving snapshots from each detection event to document improvements over time.
- Running reports from any location with DigiCert’s cloud-based administrative controls.
- Providing grades for SSL/TLS endpoints and certificates.
Using a proprietary algorithm, the Certificate Inspector analyzes SSL/TLS certificates and termination endpoints for many security factors, including:
- Weak keys, ciphers and hash algorithms
- SSL/TLS versions
- Expiring certificates
- TLS renegotiation
- Perfect Forward Secrecy
- Configuration vulnerability to FREAK, CRIME, BREACH, BEAST, etc.
- Mismatched server/certificate names
- Missing AIA’s
For each SSL/TLS certificate and termination endpoint, administrators receive a vulnerability report, a corresponding grade and a quick list of best practices for mitigating discovered weaknesses.
Certificate Inspector is available for free. Administrators can learn more about how Certificate Inspector helps them gain greater visibility into their SSL/TLS landscape by visiting https://www.digicert.com/cert-inspector-how-it-works.htm.
With OCSP response times for SSL Certificates more than four times faster than competitors, DigiCert certificates are the clear choice for performance-minded enterprises. As a result, DigiCert continues to attract the business of the world’s leading brands, including six of the global Alexa Top 10. DigiCert also works with SMBs, manufacturers, healthcare organizations, large grid computing networks and channel and software integration providers to help them secure information in transit. This includes being the go-to partner for emerging markets such as the Internet of Things, Wi-Fi security and Directed Exchange of healthcare information.
SVUS Awards organized by Silicon Valley Communications are conferred in 10 annual award programs: The Info Security’s Global Excellence Awards, The IT Industry’s Hot Companies and Best Products Awards, The Golden Bridge Business and Innovation Awards, and Consumer World Awards, CEO World Awards, Customer Sales and Service World Awards, The Globee Fastest Growing Private Companies Awards, Women World Awards, PR World Awards, and Pillar Employee Recognitions World Awards. These premier awards honor organizations of all types and sizes from all over the world including the people, products, performance, PR and marketing. To learn more, visit www.svusawards.com.
DigiCert is a premier, trusted provider of enterprise security solutions with an emphasis on authentication and encryption via managed PKI and high-assurance digital certificates. Headquartered in Lehi, Utah, DigiCert is trusted by more than 80,000 of the world’s leading government, finance, healthcare, education and Fortune 500® organizations. DigiCert has been recognized with dozens of awards for providing enhanced customer value, premium customer service and market growth leadership. For the latest DigiCert news and updates, visit digicert.com , like DigiCert on Facebook® or follow @digicert on Twitter®.