An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually.

• Self-hosted: Private deployment. All data is stored locally, to ensure data privacy and security.
• Cross Platforms: Compatible with various operating systems, including Windows/Linux/macOS.
• Zero Dependencies: No need to install databases, runtimes, or any frameworks. Ready to use out of the box.
• Low Resource Usage: Extremely lightweight, requiring only ~20 MB of memory.
• Easy to Use: Automates certificate management with a visual workflow — all with just a few simple configurations.

• Flexible workflow orchestration, fully automation from certificate application to deployment.
• Supports requesting single/multiple/wildcard domain certificates, IP address certificates, with options for RSA or ECC key.
• Supports DNS-01 challenge and HTTP-01 challenge both.
• Supports various certificate formats such as PEM, PFX, JKS.
• Supports more than 70+ domain registrars (e.g., AWS, Cloudflare, GoDaddy, Alibaba Cloud, Tencent Cloud, etc. Check out full providers).
• Supports more than 160+ deployment destinations (e.g., Kubernetes, CDN, WAF, load balancers, etc. Check out full providers).
• Supports multiple notification channels including email, Discord, Slack, Telegram, DingTalk, Feishu, WeCom, and more.
• Supports multiple ACME CAs including Let's Encrypt, Actalis, Google Trust Services, SSL.com, ZeroSSL, and more.
• More features waiting to be discovered.

Run Certimate in 1 minute!

./certimate serve

docker run -d \
  --name certimate \
  --restart unless-stopped \
  -p 8090:8090 \
  -v /etc/localtime:/etc/localtime:ro \
  -v /etc/timezone:/etc/timezone:ro \
  -v $(pwd)/data:/app/pb_data \
  certimate/certimate:latest

Visit http://127.0.0.1:8090 in your browser.

Default administrator account:

• Username: [email protected]
• Password: 1234567890

Work with Certimate right now. Or read other content in the documentation to learn more.

For full documentation, please visit docs.certimate.me.

Related articles:

• Migrate to v0.4
• 使用 CNAME 完成 ACME DNS-01 质询
• Why Certimate?

Certimate is a free and open-source project, and your feedback and contributions are needed and always welcome. Contributions include but are not limited to: submitting code, reporting bugs, sharing ideas, or showcasing your use cases based on Certimate. We also encourage users to share Certimate on personal blogs or social media.

For those who'd like to contribute code, see our Contribution Guide.

Issues and Pull Requests are opened at https://github.com/certimate-go/certimate.

This repository is available under the MIT License, and distributed “as-is” without any warranty of any kind. The authors and contributors are not responsible for any damages or losses resulting from the use or inability to use this software, including but not limited to data loss, business interruption, or any other potential harm.

No Warranties: This software comes without any express or implied warranties, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

User Responsibilities: By using this software, you agree to take full responsibility for any outcomes resulting from its use.

• Telegram

• Wechat Group (contact to the author @usual2970 to getting invitation)

  

Star Certimate on GitHub and be instantly notified of new releases!