> ## Documentation Index
> Fetch the complete documentation index at: https://docs.snapsec.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Cert Grabber

> Automatically fetch SSL/TLS certificates from discovered subdomains to enrich AIM asset data.

## Cert Grabber integration with Snapsec AIM

The **Cert Grabber** integration enhances your asset inventory by retrieving SSL/TLS certificate metadata from each discovered subdomain.

This helps detect:

* Expired certificates
* Weak encryption
* Misconfigured certificate chains
* Certificate reuse issues

***

## How It Works

Once enabled, AIM will:

* Scan discovered subdomains
* Fetch certificate details, including:
  * Issuer
  * Expiry date
  * SAN entries
  * Signature algorithm
  * Public key info
* Map certificates to:
  * Subdomains
  * Services
  * Technology fingerprints

***

## Enabling the Integration

1. Navigate to **AIM → Integrations**
2. Select **Cert Grabber**
3. Click **Install**

No API key is needed.

***

## What AIM Enriches

* Automatically flags:
  * Expired certificates
  * Soon-to-expire certificates
  * Weak or deprecated algorithms
* Creates certificate entries under **AIM → Certificates**

***

## Troubleshooting

**No certificates found:**\
Subdomain may not resolve or may not support HTTPS.

**Duplicate certificates:**\
AIM deduplicates based on fingerprint.

***

## Next Steps

> [card] [Browse Certificates](https://docs.snapsec.co/products/aim/certs)
>
> View certificate metadata, expiration alerts, and linked assets.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.