# Add a certificate

> Most certificates appear on their own from your monitors and connected providers, but you can also add one directly by scanning a server or pasting it in.

Source: https://infranest.io/docs/add-a-certificate
Last updated: 2026-10-26

---

Add a certificate to InfraNest when it hasn't been picked up automatically by your monitors or connected providers, whether by scanning a server directly or pasting in the certificate text.

## Overview
- Most certificates appear on their own once you have monitors and providers connected.
- Use this when you want to add a certificate manually — either by scanning a live server or by pasting in the certificate text.
- Scanning deliberately captures self-signed, expired or mismatched certificates too, so the health checks can flag any problems with them.

## Scan an endpoint
1. Go to **Certificates** and select **Add certificate**, then **Scan an endpoint**.
2. Enter the host (and port if it's not the default).

<!-- docs-screenshots:start -->

![Add a certificate](/media/b9caf1aa-286a-4802-aa1f-361da28fc6f6)

<!-- docs-screenshots:end -->

3. InfraNest connects, reads the certificate the server is serving (and its chain), and adds it to your inventory.

## Paste a certificate
1. Select **Add certificate**, then **Paste a PEM**.
2. Paste in the certificate text to add it directly.

> [!NOTE]
> However a certificate is added, InfraNest merges it with any matching one already in your inventory — the same certificate never shows up twice.