Built for MSPs
Take certificaterenewals offyour board.
Certonomy renews TLS and installs it across the client fleet you still touch by hand — edge, Windows, web tier, and what comes next.
Founding MSP · $6/client/mo, locked 24 months
Overview
247
Total Certificates
243
Healthy
3
Expiring Soon
1
Failed
fw.corp.localFortinet (FortiGate)HealthyMar 12, 2027
fs.corp.localWindows Server (IIS/RDS)HealthyFeb 28, 2027
vpn.corp.localPalo Alto NetworksHealthyNov 4, 2026
sonicwall.corp.localSonicWallExpiring SoonJan 19, 2027
sophos.corp.localSophosHealthyApr 2, 2027
wg.corp.localWatchGuardHealthyJun 14, 2027
web.corp.localNGINXHealthyMay 3, 2027
api.corp.localApacheHealthyAug 27, 2027
lb.corp.localHAProxyHealthyJul 11, 2027
Works with the platforms your clients already run
FortiGate- Windows Server · IIS / RDS
Apache- HAProxy
Maximum public TLS lifetime
200
days
Public certificates used to last this long.
The fleet you still touch by hand.
Launch covers the stack that still burns tickets today. Edge, Windows, and the web tier first — the rest of the fleet follows.
At launch — the tickets you already own
Fortinet FortiGate
Firewall and VPN
Microsoft IIS, Windows Server, RDS
Web and remote desktop
Palo Alto PAN-OS and GlobalProtect
Firewall and VPN
SonicWall, Sophos, WatchGuard
The rest of the edge
NGINX, Apache, HAProxy
The web tier
Next
F5 BIG-IP
Application delivery
Citrix NetScaler
Gateway
Microsoft Exchange
Mail
Cisco Secure Firewall and ISE
Firewall and identity
VMware vCenter and ESXi
Virtualization
Later
Tomcat and Java application servers
Application servers
Kubernetes and cloud certificates
Clusters
One renewal path for every client
Keys stay on site. You get a verified install — not another ticket to babysit.
- 01
CNAME validation
Prove the domain once. Certonomy handles the ACME order from there.
- 02
On-site agent
The agent runs in the customer network. Private keys are created there and never leave the site.
- 03
ACME renew
Certonomy completes the order and delivers the certificate to the agent. The key never comes back to us.
- 04
Push, verify, rollback
The agent installs the certificate, confirms the live service, and rolls back if that check fails.
Founding access pricing
The MSP line is the product. Founding partners lock the rate. Free and Team get you onto the agent without waiting for a full rollout.
Free
$0
3 certificates, business use allowed. Prove it on a real client before you commit the practice.
Team
$49/mo
25 certificates included, then $2 each. Enough room for a focused fleet without an MSP seat.
MSP
Founding · 24-mo lock$6/client/mo
10-client minimum ($60). 10 certificates per client, pooled across the account, then $1 each. 60-day trial for up to 5 clients. Founding MSPs lock this rate for 24 months.
Built for the way MSPs operate
Multi-tenant by design. Safe enough for production. Quiet enough that renewals stop showing up as tickets.
Keys never leave the customer site
Certonomy never receives the private key. The agent creates it on site and keeps it there.
Dry-run, then rollback
Preview the change before it lands. If the service check fails, the previous certificate comes back.
Verified after the push
The agent confirms the live service is presenting the certificate that was just installed.