SSL Vault
SSL Vault is a Professional edition tool that allows you to catalog and monitor SSL/TLS certificates independently of the live certificates encountered during automated hostname scans. In addition to importing certificates directly from PEM files, SSL Vault maintains a persistent historical archive of expired, rotated, and retired certificates across your domain portfolio.
Why Retain Historical Certificates?
For enterprise IT and security teams, tracking certificates beyond their expiration date is essential for compliance, security, and operational reliability:
- Audit Trails and Regulatory Compliance: Satisfy auditors (PCI-DSS, SOC 2, ISO 27001, HIPAA) by providing verifiable proof of past cryptographic hygiene, cipher standards, and timely rotation lifecycles.
- Incident Forensics and Investigations: Pinpoint the exact public key, serial number, and validity window active across any endpoint during a security incident or retrospective breach review.
- Rapid Outage Diagnosis: When deployments fail or an automated renewal breaks, quickly diff serial numbers, SAN lists, and intermediate trust chains between current and superseded certificates to find root causes.
- CA and Trust Migration Tracking: Maintain an auditable record of transitions between Certificate Authorities, internal PKIs, and cryptographic standards (e.g., migrating from RSA to ECDSA).
Note: Requires Professional Edition
