Ready to Automate Your PKI Infrastructure?
Overview
Certdog combines certificate authority hosting with certificate lifecycle management, giving organisations one console for internal CAs, Microsoft ADCS and other external authorities. Unsung is a Certdog Gold Partner, supplying and implementing the platform for UK government and enterprise customers, particularly in Microsoft ADCS environments.
Buying Certdog through Unsung
- A deployment that fits your PKI. Most Certdog projects start with an existing ADCS estate. We integrate Certdog with your current CAs, HSM or cloud key stores and DevOps tooling, rather than replacing what already works.
- Independent licensing advice. We help you choose the right licensing model and product mix, so you get value for money from Krestfield.
- Gold Partner pricing through our Krestfield partnership.
- Specialist support, with first-line triage from our PKI consultants and escalation to Krestfield when needed.
The Challenge
Many organisations rely on Microsoft ADCS, often deployed years ago with little visibility of what has been issued and limited automation for renewal. As volumes rise and lifetimes shorten, with 47-day public TLS certificates on the horizon, native ADCS tooling becomes hard to sustain.
Without a central view, teams cannot easily see what is close to expiry, and unexpected lapses cause outages. The same applies where several CAs, such as Microsoft and EJBCA, run side by side. Replacing a sound PKI is rarely the answer. The gap is usually management and automation, not the certificate authority itself.
What It Does
- Multi-CA management. Hosts any number of internal root and intermediate CAs, and connects to external CAs including Microsoft ADCS and Keyfactor EJBCA, from one console.
- Central visibility. A single searchable certificate database, with expiry monitoring and email alerts.
- Key protection. Keys held in an HSM or cloud key stores including AWS CloudHSM, Azure Key Vault and Google KMS.
- Automation. REST API, PowerShell, and .NET and Java clients bring issuance and renewal into existing workflows and DevOps pipelines.
- Discovery and monitoring. TLS discovery scanning, plus CRL and OCSP monitoring.
- Flexible deployment. Windows, Linux or Docker; single or multi-tenant; on-premises, cloud or hybrid.
How Unsung Helps
Certdog is particularly well suited to ADCS environments, where it adds visibility and automation without replacing existing infrastructure. We assess your current certificate management, design the deployment architecture, implement Certdog and its integrations, and support it once live. If you want an independent view of your PKI before choosing tooling, our PKI Health Check provides prioritised recommendations.
Certdog is not the only answer. Organisations that need enterprise-wide CLM across many teams and certificate types may find Keyfactor Command a better fit. If revocation is the main concern, CRL OCSP Monitor offers dedicated monitoring, and PKI Spotlight adds wider PKI health visibility. Because we supply all of these, our advice is led by your requirements.
Related Unsung Services
- Certificate Lifecycle Management: Visibility, automation and control across your certificate estate.
- PKI Health Check: An independent assessment of your PKI with prioritised, actionable recommendations.
- PKI Consultancy: Support for longer-term PKI strategy and tooling decisions.
- PKI Management & Hosting: Ongoing management of your PKI and certificate services by our specialists.
