Ignisfox
SSL certificate management

Stop babysitting certificates.

Ignisfox checks, converts, stores, and monitors your SSL certificates. Use the free tools right now — sign in to keep every cert safe in an encrypted vault and never miss a renewal again.

Check an SSLConvert to PFXNo account needed for the free tools.

Free tools

Always

MFA

Required on sign-in

Encryption

Per-tenant KEK

What you get

Three layers. Pick what you need.

Anonymous tools for quick one-offs. Signed-in vault for teams that care about their keys. Admin tooling only unlocked with explicit consent.

Free · No account

Instant utilities

Check a live SSL handshake. Combine PEM / CRT / key into a password-protected PFX. The converter runs entirely in your browser — keys never leave your tab.

  • Anonymous, unlimited
  • Client-side PFX encoding
  • No retention of hostnames or payloads
Most popular

Signed-in · Pro

Encrypted vault

Your certificates and keys sit behind OAuth + mandatory MFA. Every tenant gets its own data-encryption key wrapped by a master KEK. Row-level isolation, enforced at the database.

  • Google or GitHub OAuth
  • TOTP MFA enforced on first sign-in
  • Envelope encryption, per-tenant DEK

Team

Monitoring & push

Daily expiry probes, email alerts, and one-click deploy to IIS, NGINX, or Kubernetes targets. Invite guests scoped to a single vault — they never see anyone else's data.

  • Scheduled SSL monitoring
  • Device push with audit log
  • Guest invitations, scoped access
How it works

From curiosity to custody in four steps.

  1. 01

    Try the free tools

    Open /check or /convert. No sign-up. Everything runs anonymously — PFX conversion stays fully client-side.

  2. 02

    Create an account

    Sign in with Google or GitHub. Set up TOTP MFA on your first login. We verify your email before provisioning any vault.

  3. 03

    Store & monitor

    Upload certs to your encrypted vault. Add hosts you want monitored. Get alerts before expiry. Push on renewal.

  4. 04

    Invite guests

    Bring in teammates or auditors. They join your vault only — other tenants stay invisible. Revoke access any time.

Pricing

Start free. Pay when it matters.

Everything you do anonymously stays free forever. Paid tiers unlock the vault, monitoring, and device push.

Free

$0forever

Anonymous tools for the occasional cert.

  • SSL check (unlimited)
  • PFX converter (browser-only)
  • Nothing stored on our side
Use a tool
Recommended

Pro

$9per month

Personal vault with encryption + monitoring.

  • Up to 25 monitored hosts
  • Encrypted cert vault
  • Daily expiry alerts via email
  • MFA enforced on every sign-in
Start Pro trial

Team

$29per month

For small teams that share renewals.

  • Unlimited hosts
  • Guest invitations (scoped)
  • Device push (IIS, NGINX, K8s)
  • Audit log + priority support
Start Team trial

Prices are placeholders for Phase 1. Billing is Stripe-backed and wires in Phase 4.

Your next cert renewal shouldn't be a surprise.

Spin up a free account in under a minute. MFA required. No credit card until you upgrade.

Ignisfox — SSL Certificate Management for Teams