A lightweight, offline-first Windows desktop app to discover, track, and audit SSL/TLS certificates across your infrastructure — no cloud required.
Windows 10/11 (64-bit) · ~300 MB
Recommended for most users. Installs to Program Files with Start Menu shortcut.
SHA256 checksum
Run from any folder or USB drive. No installation needed.
CertVault scans your Windows certificate stores and network endpoints to give you a unified view of every SSL/TLS certificate in your environment.
Built for IT admins, developers, and security teams who need fast, reliable certificate visibility without sending data to the cloud.
Purpose-built tools for certificate discovery, monitoring, and reporting — all in one desktop app.
Automatically scan and discover all certificates in your Windows certificate stores.
Get notified before certificates expire so you never face unexpected outages.
Export comprehensive certificate reports in CSV or PDF format for audits.
Inspect certificate chains, key algorithms, SANs, and issuer details at a glance.
Check SSL/TLS certificates on remote hosts and IP addresses directly from the app.
Visual timeline showing certificate validity periods and upcoming expirations.
Export certificate data in multiple formats for sharing with your team or auditors.
Browse Personal, Trusted Root, Intermediate, and other Windows certificate store layers.
Available as a standard installer or a portable executable — no installation required for the portable version.
Recommended for most users. Installs to Program Files with Start Menu shortcut.
SHA256 checksum
Run from any folder or USB drive. No installation needed.
Enterprise & Infrastructure
Outcome: Full certificate visibility across your entire infrastructure.
Dev & QA Environments
Outcome: Catch certificate misconfigurations before they reach production.
Security & Compliance
Outcome: Reduce certificate-related attack surface with continuous auditing.
Personal & Home Lab
Outcome: Never be surprised by an expired certificate again.
Windows 10 or Windows 11 (64-bit)
.NET 6.0 Runtime or later
50 MB free disk space
Administrator privileges for full store access
Yes. CertVault is completely free for personal and commercial use with no feature restrictions.
No. CertVault works entirely offline. It only accesses your local Windows certificate stores and any remote endpoints you explicitly configure.
CertVault supports Windows 10 and Windows 11 (64-bit). Windows Server 2019 and 2022 are also supported.
Absolutely not. CertVault has zero telemetry. No usage data, crash reports, or certificate information ever leaves your machine.
Yes. You can install or run the portable version on as many machines as you like.
Have a question, found a bug, or want to request a feature? Reach out to the RannLab team directly.
Download CertVault for free and get full visibility into your SSL/TLS certificate landscape in minutes.
Free forever. No account required. Windows only.