Self-hosted control plane for TLS certificates that issues, renews, discovers, inventories and deploys them across your infrastructure.
certimate-go/certimate
Self-hosted ACME tool that automates SSL certificate issuance, deployment, renewal and monitoring through a visual workflow.
Open-source alternative to:Sectigo Certificate Manager
- Stars
- 9,382
- Forks
- 914
- Open issues
- 49
- Last commit
- 16 hours ago
What is it?
Certimate is a self-hosted SSL certificate management tool that handles the full lifecycle of certificates: requesting them from an ACME certificate authority, deploying them to target services, renewing them before expiry, and monitoring their status. Workflows are configured visually rather than through scripts.
It runs as a single binary on Windows, Linux and macOS, or from a Docker image, with no separate database or runtime to install. Certificates can cover single, multiple or wildcard domains, and IP address certificates are supported, using RSA or ECC keys. Both DNS-01 and HTTP-01 challenges are available, and output formats include PEM, PFX and JKS.
The project connects to a large number of DNS providers, hosting and deployment destinations such as Kubernetes, CDNs, WAFs and load balancers, and notification channels including email, Discord, Slack, Telegram, DingTalk, Feishu and WeCom.
Key features
- 01Visual workflows covering certificate application through deployment
- 02Single, multiple, wildcard and IP address certificates with RSA or ECC keys
- 03DNS-01 and HTTP-01 challenge support
- 04Output in PEM, PFX and JKS formats
- 05Integrations with 70+ DNS providers and 160+ deployment destinations
- 06Notifications via email, Discord, Slack, Telegram, DingTalk, Feishu and WeCom
Use cases
- Automating Let's Encrypt or ZeroSSL certificate renewal for self-hosted websites
- Deploying renewed certificates to cloud CDNs, load balancers or Kubernetes clusters
- Managing certificates for several domains from one visual dashboard
Quick start
- 1
Download the precompiled binary from GitHub Releases and extract it
- 2
Run the server binary
./certimate serve - 3
Or start it with Docker
docker run -d --name certimate --restart unless-stopped -p 8090:8090 -v /etc/localtime:/etc/localtime:ro -v /etc/timezone:/etc/timezone:ro -v $(pwd)/data:/app/pb_data certimate/certimate:latest - 4
Open http://127.0.0.1:8090 in your browser and log in with the default admin account
Things to know
- The README's default admin password is public, so change it after first login.
- Certimate needs access to your DNS or hosting provider accounts to automate issuance and deployment.
Topics
FAQ
- What is certimate?
- Self-hosted ACME tool that automates SSL certificate issuance, deployment, renewal and monitoring through a visual workflow. Certimate is a self-hosted SSL certificate management tool that handles the full lifecycle of certificates: requesting them from an ACME certificate authority, deploying them to target services, renewing them before expiry, and monitoring their status. Workflows are configured visually rather than through scripts.
- Is certimate free to use? What license does it have?
- certimate is open source under the MIT license. Check the license terms before using it in commercial products.
- Is certimate still maintained?
- Actively maintained. The last commit to certimate was on Oct 19, 2026.
- What can I use certimate for?
- Automating Let's Encrypt or ZeroSSL certificate renewal for self-hosted websites Deploying renewed certificates to cloud CDNs, load balancers or Kubernetes clusters Managing certificates for several domains from one visual dashboard
- How do I install certimate?
- Download the precompiled binary from GitHub Releases and extract it Run the server binary: ./certimate serve Or start it with Docker: docker run -d --name certimate --restart unless-stopped -p 8090:8090 -v /etc/localtime:/etc/localtime:ro -v /etc/timezone:/etc/timezone:ro -v $(pwd)/data:/app/pb_data certimate/certimate:latest Open http://127.0.0.1:8090 in your browser and log in with the default admin account
- Where can I get certimate?
- The source code and installation instructions are on GitHub: https://github.com/certimate-go/certimate
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A self-hosted tunnel written in Go that exposes localhost services to the internet through your own domain and server.
A self-hosted, all-in-one software development service written in Go, covering Git hosting, code review, issues, packages and CI/CD.
Infrastructure as code CLI that plans and applies declarative configuration files to create, change, and version cloud and service resources.
A programmable automation engine that builds, tests and ships codebases using containers, running locally, in CI or in the cloud.
Free, self-hosted PostgreSQL backup tool with Point-in-Time Recovery, automated restore verification, and a web UI.