Branding & appearance¶

CertIntel has one look, shown in light or dark mode. It is the same on this wiki, the public website, the dashboard and the Windows Agent; each place remembers your light/dark choice in its own way. There is no choice of visual theme. Earlier versions of the dashboard and the Windows Agent offered one; a theme saved there is now shown as the standard look, and custom colors and logos are kept.

The dashboard moves a little: a page change cross-fades, a page's content settles into place, and the sign-in card keeps its place between the steps of signing in (email, password, two-factor) while its fields arrive. Each lasts a fraction of a second. With reduce motion turned on in your operating system or browser, the dashboard does not animate at all. A browser without cross-document view transitions changes pages as before.

Wiki and website appearance¶

Use the light/dark button in the wiki header to switch between light and dark mode. The choice is shared between certin.tel and wiki.certin.tel through cookies, so both sites look the same. The first time you change it a notice titled Your appearance preferences asks whether to Remember my appearance; with that on, the choice is kept for up to a year. With it off, or when cookies and browser storage are blocked, the choice lasts only for the current page. See Privacy & cookies. This is a personal preference for the public sites only; it does not change your tenant, dashboard or Agent settings.

Agent screenshots on this wiki follow your light/dark mode. They were captured before the Agent moved to this look, so their colors and typefaces differ from the current app. Click an image to open it in a viewer covering 95% of the screen. Choose Actual size to inspect fine details, and press Escape or Close to return to the page.

Tenant appearance¶

On plans that include the Appearance feature (the Enterprise plan; see Plans, pricing and limits), a tenant administrator opens Tenant appearance in the dashboard sidebar (the page was previously called Branding; the old /branding address still works). This sets the colors and layout density of the tenant's dashboard and sign-in page for everyone.

1. Optionally open Dashboard colors, expand Light mode or Dark mode, tick Customize … next to any color you want to change (for example Buttons and selected navigation or Text on buttons) and pick a color. Unticked colors keep the standard CertIntel color, and the button that restores the original colors clears every customization. Light and dark palettes are saved separately.
2. Under Layout density, keep Comfortable (default) or choose Compact. Compact uses slightly smaller text and tighter spacing in the header, side menu, cards, tables and forms, so more rows and tiles fit on one screen. Nothing is hidden or moved; it is the same layout, closer together. The density applies to everyone in the tenant unless a user picks their own under My appearance; the sign-in page is unaffected.
3. Click Save (the page confirms Appearance saved.). Reset to defaults restores comfortable density and no customizations.

Keep text readable against its background, and keep the success, warning and error colors distinguishable. A child-organization administrator cannot open this page; it is tenant-administrator only, and on plans without the feature the dashboard reports Your plan does not enable appearance customization.

Tenant logo and favicon¶

The same page has a Tenant logo and favicon card. Custom images appear only on your tenant's own <slug>.app.certin.tel pages (and on your vanity domain, if set); the shared app.certin.tel sign-in page keeps the CertIntel identity.

Uploading a new image replaces the existing one. Tick Remove current logo or Remove current favicon and click Save images to go back to the CertIntel artwork.

Client co-branding (MSP mode)¶

Tenant appearance applies to the whole workspace. On plans with MSP (the Enterprise plan), a client organization can add its own name and logo next to it: Organizations → Co-branding on the client's row (workspace-wide branding.update). The client logo follows the same shape rules as the dashboard logo, but at most 256 KB, and is stored as PNG.

• In the dashboard the client's name and logo appear beside the tenant's branding while the view is that organization only (selected in the top bar, or after switching into the client). The tenant colors, logo and favicon stay as they are.
• Emails and scheduled reports for that organization read <workspace> for <client> in their header, as text only; no logo is sent by email.
• The sign-in page and the vanity domain keep the tenant's branding.

See MSP mode for the form, the Clients page and switching into a client.

Your own address (vanity domain)¶

On plans that include a workspace address (https://<slug>.app.certin.tel), a tenant administrator can also serve the same workspace at a hostname the organization owns, for example certintel.your-company.com. Open Security → Your own address (vanity domain), enter the hostname, click Add vanity domain, and create the two CNAME records the page then shows at your DNS provider (Re-check DNS & renew now repeats the check later):

Then choose Check DNS & issue certificate. CertIntel verifies both records through public resolvers, obtains a certificate for exactly that hostname (no wildcard, no other names), renews it automatically before expiry, and keeps a still-valid certificate in service if a renewal fails. Records that propagate later are picked up by a periodic re-check, so you do not have to click again. Sign-in and the dashboard then work at both addresses, and the Security page's other controls (workspace-host-only sign-in, IP allowlists) treat the vanity domain exactly like your workspace address.

Notes:

• One vanity hostname per tenant. Most DNS providers cannot place a CNAME at a bare domain (zone apex); use a subdomain such as certintel.<your-domain>.
• With Cloudflare, set both records to DNS only (grey cloud), not proxied.
• The Delegated DNS-01 record behind the vanity domain appears on the Delegated DNS-01 page but cannot be revoked or deleted while in use; remove the vanity domain first.
• Remove vanity domain stops serving the certificate immediately. Changing the tenant slug invalidates the first CNAME until you update it.
• The feature is enabled per deployment; if the card is not on the Security page, your CertIntel installation does not offer it.

My appearance (per user)¶

On the same plans, every signed-in user can pick their own look under You → My appearance in the sidebar. The preference is stored with the account, so it follows you across browsers and devices.

• Color mode: Use system setting, Light or Dark. The light/dark button in the dashboard header saves to this setting as well.
• Colors: Use tenant colors or Use my own colors. Your own colors open the same Dashboard colors editor as the tenant's, for your account only.
• Layout density: Use tenant default, Comfortable or Compact. Choosing Comfortable explicitly opts you out of a compact tenant; Compact gives you the denser layout even when the tenant is comfortable.
• Save stores the choice; Reset to tenant default removes it.

The tenant's logo and favicon are the same for everyone in the tenant. On plans without the Appearance feature, and on the sign-in page, the header's light/dark button is remembered by a cookie in that browser only.

Time zone¶

CertIntel stores every timestamp in UTC and shows it in a time zone you choose, on every plan. It works the same way as layout density: the workspace has a default and each person can override it.

• Workspace default: a tenant administrator sets Time zone in the Organization settings card of Settings → Security. New workspaces start on UTC. The change is written to the activity log.
• Personal choice: anyone signed in opens You → My preferences and picks a zone, or Use workspace default to follow the administrator's setting (including future changes). The choice is stored with the account.

Every date and time on the dashboard follows the zone in effect: certificate validity, last-seen and next-check times, an Agent's Offline since …, activity and job history, the page footer clock. Times carry the zone's abbreviation (EDT, CET, JST), and the Since / Until filters on the Activity Log and Background Jobs pages read the values you type in that zone. The daily counts of the Overview's 30-day trends follow it too: each day, including today, is a calendar day in your zone, and the chart names the zone.

Dates and times in alert emails and scheduled reports use the workspace default, whoever receives them.

These stay in UTC by design:

• API responses, which are ISO-8601 with an explicit offset;
• the Hour (UTC) you pick when scheduling a report or backup;
• the expiry time in an invitation email;
• an alert summary whose text says UTC, such as Agent late: … (last report 2026-11-10 08:15 UTC, …).

Windows Agent appearance¶

The Windows Agent has the same single look, in light or dark mode. It follows the tenant's customized button colors (the Buttons and selected navigation and Text on buttons colors of the matching light or dark palette) after it receives branding from the platform. This requires an install-token-enrolled agent that has been approved. An agent connected with an integration API key uses the standard colors.

To keep the standard colors on one server, the server administrator opens Settings → Appearance and turns Tenant override on. Platform check-ins will no longer change that server's colors. Turn Tenant override off to resume following the tenant; Refresh tenant branding (Refresh platform theme in Agent 1.10.0 and earlier) fetches the tenant's current colors immediately. The override applies to the server; the Color mode preference is saved for the Windows user running the app. Light/dark mode remains independently selectable when following the tenant. Windows high-contrast colors take priority.

The appearance status explains whether the agent is following the tenant, using an override, waiting for approval, or unable to obtain branding. When branding is unavailable, the standard colors are used until a successful check-in.

Agent 1.10.0 and earlier also have a Visual theme list under Settings → Appearance. Later versions do not.

Brand assets¶

Official CertIntel logos, icons and colors, ready to download. The identity is a pale blue-grey page with dark ink text, a brand-blue shield mark and brand-blue actions, set in Signika, Tektur and Martian Mono. Orange is not a brand color: it is kept for warnings, such as a certificate that expires soon.

All logo files are SVG with the lettering converted to outlines, so they render identically without any font installed. The horizontal logo, the brand mark, the app icon and the favicon also come as PNG. "Light" and "dark" in a file name describe the background the file is made for, not the color of the artwork.

Primary logo (mark + wordmark)¶

Horizontal - website headers, presentation titles, product signatures.

Preview	Files
	logo-horizontal-light.svg · .png
	logo-horizontal-dark.svg · .png

Standalone mark¶

The shield and radar symbol on its own.

Preview	Files	Use
	mark-brand.svg · .png · mark-light.svg (the same artwork)	Default mark on light backgrounds
	mark-dark.svg	Default mark on dark backgrounds
	mark-ink.svg	Single-color use on light backgrounds
	mark-white.svg	Single-color use on dark or colored backgrounds

App icon¶

A white mark on a brand-blue tile, for PWA manifests, touch icons and app listings.

Preview	Files
	app-icon.svg · app-icon.png (512 × 512) · apple-touch-icon.png (180 × 180)

Favicon¶

favicon.svg · favicon-32.png · favicon-16.png

The favicon is drawn to stay legible at 16px. It is this site's own browser tab icon.

Color palette¶

HSL values are canonical; hex values are rounded for SVGs and design tools. The brand blue is the same in both modes.

Use the brand blue as a fill, with white text on it. As text on the dark page it is too weak, so links use the link color instead. Keep orange for warnings and countdowns; do not use it for buttons, links or decoration.

Typography¶

All three typefaces are free under the SIL Open Font License. The logo files don't need them installed.

Using the logo¶

• Keep clear space of at least one shield-width around the logo.
• Minimum sizes: horizontal logo 160px wide and the mark 24px high. Below that, use the favicon.
• Keep the logo level, unshadowed, in its supplied colors and proportions.
• Use alt="CertIntel" on logo images, or empty alt text when the product name is already written next to the mark.