Manage Your SSL/TLS Certificates with CertVault

A lightweight, offline-first Windows desktop app to discover, track, and audit SSL/TLS certificates across your infrastructure — no cloud required.

Quick Download

Windows 10/11 (64-bit) · ~300 MB

Installer Edition

Recommended for most users. Installs to Program Files with Start Menu shortcut.

Recommended

SHA256 checksum

Portable Edition

Run from any folder or USB drive. No installation needed.

Your local certificate management command center

CertVault scans your Windows certificate stores and network endpoints to give you a unified view of every SSL/TLS certificate in your environment.

Built for IT admins, developers, and security teams who need fast, reliable certificate visibility without sending data to the cloud.

Why CertVault?

Works fully offline — no internet connection required

Zero data leaves your machine

Lightweight installer under 10 MB

No subscription, no account, no tracking

Features

Everything you need to stay on top of certificates

Purpose-built tools for certificate discovery, monitoring, and reporting — all in one desktop app.

Certificate Discovery

Automatically scan and discover all certificates in your Windows certificate stores.

Expiry Alerts

Get notified before certificates expire so you never face unexpected outages.

Detailed Reports

Export comprehensive certificate reports in CSV or PDF format for audits.

Key & Chain Inspection

Inspect certificate chains, key algorithms, SANs, and issuer details at a glance.

Endpoint Monitoring

Check SSL/TLS certificates on remote hosts and IP addresses directly from the app.

Validity Timeline

Visual timeline showing certificate validity periods and upcoming expirations.

Export & Share

Export certificate data in multiple formats for sharing with your team or auditors.

Store Layers

Browse Personal, Trusted Root, Intermediate, and other Windows certificate store layers.

Download

Download CertVault for Windows

Available as a standard installer or a portable executable — no installation required for the portable version.

Installer Edition

Recommended for most users. Installs to Program Files with Start Menu shortcut.

Recommended

SHA256 checksum

Portable Edition

Run from any folder or USB drive. No installation needed.

Always verify the SHA-256 checksum of your download to ensure file integrity.

# Compute hash of downloaded file
Get-FileHash .\RannlabCertVault-Setup-0.4.2.exe -Algorithm SHA256
# Read expected hash from checksum file
Get-Content .\RannlabCertVault-Setup-0.4.2.exe.sha256
# Compare both hashes before running

Who is it for?

Built for everyone who manages certificates

Whether you're a solo developer or an enterprise IT team, CertVault fits your workflow.

IT Administrators

Enterprise & Infrastructure

Outcome: Full certificate visibility across your entire infrastructure.

Developers

Dev & QA Environments

Outcome: Catch certificate misconfigurations before they reach production.

Security Teams

Security & Compliance

Outcome: Reduce certificate-related attack surface with continuous auditing.

Individual Users

Personal & Home Lab

Outcome: Never be surprised by an expired certificate again.

System Requirements

Operating System

Windows 10 or Windows 11 (64-bit)

Runtime

.NET 6.0 Runtime or later

Disk Space

50 MB free disk space

Permissions

Administrator privileges for full store access

Security & Privacy

No data is ever transmitted to external servers.

All certificate data stays on your local machine.

No analytics, telemetry, or crash reporting.

SHA-256 checksums provided for every release.

Release Notes — v0.4.2

Improved certificate store scanning performance

Fixed expiry date parsing for non-standard certificate formats

Added CSV export with customizable columns

UI polish and dark mode improvements

FAQ

Frequently Asked Questions

Yes. CertVault is completely free for personal and commercial use with no feature restrictions.

No. CertVault works entirely offline. It only accesses your local Windows certificate stores and any remote endpoints you explicitly configure.

CertVault supports Windows 10 and Windows 11 (64-bit). Windows Server 2019 and 2022 are also supported.

Absolutely not. CertVault has zero telemetry. No usage data, crash reports, or certificate information ever leaves your machine.

Yes. You can install or run the portable version on as many machines as you like.

Need help?

Have a question, found a bug, or want to request a feature? Reach out to the RannLab team directly.

Start managing your certificates today

Download CertVault for free and get full visibility into your SSL/TLS certificate landscape in minutes.

Free forever. No account required. Windows only.