Every one of your clients has to automate SSL/TLS certificates before 2029, and they will look to you for the answer. Make CertKit that answer. Resell it on your own paper at your own price, or run it for them as a managed service. You own the client. CertKit handles the certificates.
Built for MSPs, system integrators, and value-added resellers.
The CA/Browser Forum voted to cut the maximum lifetime of public SSL/TLS certificates from 398 days to 47. Certificate lifetimes are shrinking on a published schedule, and the first cut has already happened.
| Effective | Maximum lifetime | Renewals per certificate |
|---|---|---|
| March 15, 2026 | 200 days (in effect) | about 3 a year |
| March 15, 2027 | 100 days | about 5 a year |
| March 15, 2029 | 47 days | about 12 a year |
Nobody will renew twelve times a year manually. The rule applies to every organization with a public certificate, in every industry, and in every country. Every Windows and Exchange server, RDP gateway, SonicWall and FortiGate VPN, load balancer, and appliance your clients run needs a new certificate every few weeks, and none of them will renew themselves.
Most of your clients have no plan. When the spreadsheet and the calendar reminder stop working, they will call whoever helps with their infrastructure. Have the answer before they ask.
Certificates are already your problem. An expired one takes down a VPN or a mail server, and the support ticket lands on your desk. Put every client on automated renewal and deployment, and the recurring fire drill becomes a recurring line item.
Every prospect in your market has this problem, with a published deadline, whether they know it yet or not. Few pain points come with a date attached. Lead with certificates, fix the thing that was about to break, and you have a new account.
CertKit makes what many companies struggle with much easier to manage while at the same time providing great value compared to the traditional vendors in the space.
Ben Story, Managed Services Director, RedEye Network Solutions
Buy CertKit accounts for your clients at a partner discount and resell them on your own contract, at the price you set. Your margin is the discount plus whatever you charge for implementation and support.
The partner discount steps up as your volume does. It applies to renewals as well as new deals, so the accounts you placed last year keep paying.
Register a deal and CertKit won't sell into it directly or hand it to another partner. Your clients' renewals go through you for as long as you are in the program.
Hand clients their own account, or operate CertKit for them as a managed service. Your partner account is free, each client gets a separate account underneath it, and your name and logo go on what they see.
Your clients call you, and you call us. Your technical contacts escalate straight to the CertKit engineering team, the people who build the product.
Demo access, sales collateral, and security documentation come with the program. Start a free 90-day trial for any prospect under your partner account, long enough for them to watch certificates renew and deploy on their own.
Yes. CertKit sells through this website, and most direct customers buy self-serve. Deal registration keeps the two apart. Once a deal is registered to you, CertKit won't sell into it.
A percentage off the published CertKit list prices, so you and your client can always see what the discount is measured against. The discount schedule is shared on a call.
You do. First-line support is part of the service you sell, and CertKit supports you. Your technical contacts escalate directly to our engineers.
You do, on your terms and in your currency. CertKit invoices you annually in US dollars.
No. You find and develop your own clients. What the program gives you is a product those clients need on a deadline, and protection for the deals you bring.
Yes. Every account starts with a free 90-day trial, no credit card required.
CertKit is sold as CertKit, with your name and logo alongside it on what your clients see. It doesn't embed in another vendor's portal or storefront, and there are no custom builds of the product.
One call covers how the program works, the partner pricing, and whether it fits the way you sell.