RANNLAB CERTVAULT 0.5.0 - FEATURE BRIEF FOR THE WEBSITE
=======================================================

Purpose of this file
--------------------
This brief is for the website developer. It lists what is new in version 0.5.0 and
gives ready-to-use wording for the product page, the download page and the launch
announcement. All statements below describe what the software actually does.


1. PRODUCT IN ONE LINE
----------------------
Rannlab CertVault is a Windows desktop toolkit for PKI and SSL/TLS certificate work:
inspect, convert, build, validate, sign, monitor and report on certificates, without
needing OpenSSL commands.

Suggested tagline:
  "Everything you do with certificates, in one Windows app."

Short description (about 40 words):
  Rannlab CertVault helps IT admins, DevOps teams and PKI/security staff work with SSL
  and code-signing certificates. Open any certificate or PFX, fix chains, convert
  formats, test a live website, manage Windows certificate stores and keep expiry
  under control.

Who it is for:
  - IT administrators and support teams
  - DevOps / SRE engineers
  - PKI and security teams
  - Web hosting providers and small businesses
  - Users of Indian Digital Signature Certificates (DSC / USB tokens)


2. DOWNLOADS FOR THE WEBSITE
----------------------------
Version: 0.5.0        Platform: Windows 10 / 11, 64-bit        Release date: 27 October 2026

  Installer (recommended)   RannlabCertVault-Setup-0.5.0.exe      46.4 MB
    - Installs the app, adds a Start Menu shortcut, includes uninstaller
    - Needs Administrator rights to install
    - Supports silent install (command line switches of the setup program)

  Portable (no install)     RannlabCertVault-Portable-0.5.0.exe   147.4 MB
    - Single EXE, runs directly, nothing is installed

SHA-256 checksums (show these next to the download buttons):
  Setup    2435A979D258B41B0D83D8EAA4860FDE9B661D01166B659ADAD5B2DAD5568AF6
  Portable B5E7D021EBFAEE3DFB092FD53E3AD2E1F05C699343E06A0652929AF8BD4C36C3
  (The .sha256 files shipped with the downloads are the source of truth. If a file is
   rebuilt, copy the new values from those files.)

Requirements (for the "System requirements" box):
  - Windows 10 or Windows 11, 64-bit
  - No separate .NET installation needed (the runtime is included)
  - Internet is optional. It is only used by features marked "online" below.
  - To test TLS 1.3 endpoints from the app, Windows 11 or Windows Server 2022 is needed.

Important note for the download page:
  This release is not yet digitally signed. Windows SmartScreen may show an
  "unknown publisher" warning. Please add a short line telling users to choose
  "More info" > "Run anyway", and to compare the SHA-256 value above with the file
  they downloaded. Remove this note once a signed build is published.


3. WHAT IS NEW IN 0.5.0 (HEADLINE LIST)
---------------------------------------
Use this list for the launch post and the top of the product page.

  NEW MODULES
  1. Diagnostics Center     - activity log from every module, system health check, certificate check with fixes
  2. SSL Analyzer           - grade (A to F) for any HTTPS website
  3. Converter              - PEM, DER, PKCS#7 and PFX conversion, key extraction
  4. Chain Builder          - find missing intermediates, build fullchain.pem, fix bundle order
  5. Key Matcher            - confirm certificate, private key and CSR belong together
  6. Store Manager          - browse, import, export and remove certificates in Windows stores
  7. Code Signing           - sign and verify EXE, DLL, MSI and script files
  8. Reports                - HTML and CSV certificate inventory and expiry reports
  9. Batch Tools (rebuilt)  - scan a whole folder of certificates
 10. DSC Tools (rebuilt)    - Indian Digital Signature Certificate helper

  IMPROVEMENTS
  - Create PFX now lets you add optional intermediate / CA certificates
  - Completely new, modern look with a working dark theme
  - Password-protected, portable Vault backups
  - Live-updating Dashboard
  - Settings that work (including the security banners option)
  - Many fixes for text being cut off on smaller windows


4. FEATURE DETAILS (ONE BLOCK PER FEATURE PAGE OR SECTION)
-----------------------------------------------------------

4.1 DIAGNOSTICS CENTER  [NEW]
  Headline: "Know what happened, and how to fix it."
  - Activity Log: every module records what it did and any error, with time, source
    and a suggested fix. The log is saved on the PC (kept for 14 days) and updates
    live. Search, filter by module, show issues only, copy, export as ZIP.
  - Passwords and private keys are automatically removed from logs.
  - System Health check: store access, administrator rights, internet access, system
    clock accuracy, CRL/OCSP reachability, TLS support, writable data folder.
  - Certificate Check: analyzes the loaded certificate and lists problems with a
    fix for each (expiry, weak key, old SHA-1 signature, missing SAN, incomplete or
    untrusted chain, optional online revocation check).
  Note for developer: the health check, when run, contacts www.microsoft.com and
  crl.microsoft.com only to test connectivity and the clock.

4.2 SSL ANALYZER  [NEW]  (online)
  Headline: "Test any HTTPS site and get a clear grade."
  - Enter a host name or URL. Get an overall grade from A to F with a score.
  - Checks the certificate, validity dates, key size and signature algorithm, names
    (SAN), hostname match, trust chain, and revocation status (OCSP/CRL, optional).
  - Shows TLS 1.0, 1.1, 1.2 and 1.3 support. If this PC cannot test a protocol, the
    app says "Not testable here" instead of guessing.
  - Shows the exact chain the server sends. Copy a text report or save the chain.

4.3 CONVERTER  [NEW]  (offline)
  Headline: "PEM, DER, P7B and PFX - converted in a click."
  - Converts between PEM, DER (.cer), PKCS#7 (.p7b) and PFX (.pfx).
  - Builds a PFX from a certificate + private key (+ chain).
  - Extracts the private key from a PFX (optionally encrypted with a password).
  - Detects the input format automatically.

4.4 CHAIN BUILDER  [NEW]  (offline, or online for automatic download)
  Headline: "Fix 'incomplete chain' errors."
  - Finds missing intermediate certificates (automatic download is optional).
  - Saves fullchain.pem (server certificate + intermediates), chain.pem or .p7b.
  - "Fix Bundle Order" sorts a messy certificate bundle into the right order and
    removes duplicates.

4.5 KEY MATCHER  [NEW]  (offline)
  Headline: "Does this key belong to this certificate?"
  - Compares certificate, private key and CSR by their public-key fingerprint.
  - Clear matching / not matching result. Supports RSA and ECDSA, encrypted keys.

4.6 STORE MANAGER  [NEW]  (offline)
  Headline: "Manage Windows certificate stores without MMC."
  - Browse Current User and Local Machine stores (Personal, Trusted Root,
    Intermediate CAs and more). Search, see expiry state, key presence, thumbprint.
  - Import certificates and PFX files, export public certificates, remove
    certificates (with a warning when a private key would be lost).
  - Local Machine changes need Administrator rights.

4.7 CODE SIGNING  [NEW]  (Windows only; timestamp is online)
  Headline: "Sign and verify your software."
  - Sign EXE, DLL, MSI, SYS, CAT and script files (PowerShell, VBS, JS).
  - Use a PFX file or a certificate from the Windows store. SHA-256/384/512.
  - Timestamp server support (default http://timestamp.digicert.com, editable).
  - Verify an existing signature and see the signer, thumbprint and timestamp.
  - Also checks whether a loaded certificate can be used for code signing.

4.8 REPORTS  [NEW]  (offline)
  Headline: "Audit-ready certificate reports."
  - Build an inventory from certificates loaded in the app, a Windows store, or a
    folder of files.
  - Counts expired, expiring within 30 days, weak keys, old signatures, self-signed.
  - Save as a formatted HTML page or as CSV for Excel.

4.9 BATCH TOOLS  [REBUILT]  (offline)
  Headline: "Scan a whole folder in one go."
  - Reads every certificate in a folder (and subfolders), not just counts files.
  - Flags expired, expiring, weak and duplicate certificates.
  - Lists unreadable or password-protected files. Export HTML or CSV.

4.10 DSC TOOLS  [REBUILT]  (offline)
  Headline: "Built for Indian Digital Signature Certificates."
  - Finds DSCs in the Windows certificate store (document-signing certificates from
    Indian certifying authorities such as ProDigiSign, eMudhra, Sify, nCode and others).
  - Shows holder, organization, email, issuer, expiry and whether the key is on a
    USB token or stored in software.
  - Health checks: validity, signing capability, issuer, email, and trust chain to
    CCA India.
  - Shows installed USB token drivers (for example ePass, WatchData, HYP2003,
    mToken, PROXKey) and registered smart card readers.

4.11 CREATE PFX  [IMPROVED]
  - New optional section: add intermediate / CA certificates (PEM, CER, CRT, P7B,
    bundles with several certificates). They are included in the finished PFX.
  - Works with certificate + key files and with a certificate loaded in the app.

4.12 VAULT  [IMPROVED]
  - Backups are now protected with a password you choose (AES-256), so they can be
    restored on another PC or Windows account. Older backups still open.
  - Fixed the hidden-value display.

4.13 DASHBOARD  [IMPROVED]
  - Updates automatically when certificates are loaded or new activity happens.

4.14 INSPECT CERTIFICATE / PFX  [IMPROVED]
  - Text and Copy buttons no longer get cut off on smaller windows.
  - Certificate validation status text now shows in full.

4.15 SETTINGS, ABOUT, EXPIRY MONITORING  [IMPROVED]
  - "Show security guidance banners" now works; values are checked and corrected.
  - Shows the real version number. Quick link to open the app data folder.
  - Expiry Monitoring no longer interrupts startup with a pop-up and exports a
    safer CSV.

4.16 LOOK AND FEEL  [NEW]
  - Modern, clean Windows design with rounded cards, new buttons, inputs and tables.
  - Light, Dark and "follow Windows" themes.


5. FEATURES THAT ALREADY EXISTED (KEEP ON THE PAGE)
---------------------------------------------------
  - Inspect certificates and PFX files: purpose detection, SAN, EKU, risk indicators,
    chain validation, export public certificate / PFX / private key
  - CSR Generator (RSA / ECDSA, SAN support) and CSR Validation
  - Install / Import into Windows stores
  - Export (DER, PEM, PKCS#7)
  - Expiry Monitoring with background checks and notifications
  - x509dump command-line tool for automation


6. PRIVACY AND SECURITY STATEMENTS (SAFE TO PUBLISH)
----------------------------------------------------
  - Offline first: all core features work without internet.
  - Files, keys and certificates are processed on the user's PC and are not uploaded
    by the app.
  - Online connections happen only when the user uses an online feature: SSL Analyzer
    (connects to the host entered), Chain Builder automatic download of missing
    intermediates, online revocation checks, the connectivity test in the health check,
    and the timestamp server in Code Signing.
  - Logs hide passwords and private keys. Vault data is encrypted for the current
    Windows user; Vault backups are encrypted with the user's backup password.
  Do not claim: "digitally signed installer", "Microsoft Store listing" or "MSI
  package" for this release - none of these are included yet.


7. SUGGESTED PAGE STRUCTURE FOR THE NEW WEBSITE
-----------------------------------------------
  1. Hero: tagline, short description, [Download Installer] [Download Portable]
  2. "What you can do" - 8 to 10 feature cards (use the headlines in section 4)
  3. Screenshot gallery - take these from the app (Light and Dark):
       Dashboard, Inspect, Create PFX (with intermediates), Diagnostics (3 tabs),
       SSL Analyzer result, Chain Builder, Store Manager, Code Signing, Reports, DSC Tools
  4. "Who uses it" - audience list from section 1
  5. What's new in 0.5.0 - list from section 3
  6. System requirements, checksums and SmartScreen note from section 2
  7. Privacy and security box from section 6
  8. Support and contact


8. SUPPORT AND COMPANY DETAILS (FROM THE ABOUT PAGE OF THE APP)
---------------------------------------------------------------
  Company:   Rannlab Technologies
  Website:   https://rannlab.com/contact-us/
  Email:     info@rannlab.com
  Phone:     9990613366
  Copyright: (c) 2026 Rannlab Technologies. All rights reserved.
  The software is proprietary to Rannlab Technologies.


9. FILES HANDED OVER WITH THIS BRIEF
------------------------------------
  - RannlabCertVault-Setup-0.5.0.exe  and its .sha256 file
  - RannlabCertVault-Portable-0.5.0.exe  and its .sha256 file
  - WebsiteRelease-0.5.0.txt (short upload checklist)
  - WebsiteFeatures-0.5.0.txt (this file)
