About this project

Certimate is an open-source, self-hosted SSL certificate management tool built around the ACME protocol. It automates the complete certificate lifecycle—application, deployment, renewal, and monitoring—using a visual workflow interface, aiming to replace manual certificate handling with a few simple configurations. Core characteristics: - Self-hosted: deployed privately with all data stored locally, prioritizing data privacy and security. - Cross-platform: runs on Windows, Linux, and macOS. - Zero dependencies: no database, runtime, or framework installation required; works out of the box. - Lightweight: the project reports roughly 20 MB of memory usage. Feature highlights: - Flexible workflow orchestration covering automation from certificate application through deployment. - Support for single, multiple, and wildcard domain certificates, as well as IP address certificates, with a choice of RSA or ECC keys. - Both DNS-01 and HTTP-01 ACME challenge types. - Multiple certificate output formats, including PEM, PFX, and JKS. - Integration with more than 70 domain registrars and DNS providers (e.g., AWS, Cloudflare, GoDaddy, Alibaba Cloud, Tencent Cloud). - More than 160 deployment destinations, including Kubernetes, CDN, WAF, and load balancers. - Notifications via email, Discord, Slack, Telegram, DingTalk, Feishu, WeCom, and other channels. - Support for multiple ACME certificate authorities, such as Let's Encrypt, Actalis, Google Trust Services, SSL.com, and ZeroSSL. Getting started is straightforward. A precompiled binary can be downloaded from GitHub Releases and launched with `certimate serve`, or the tool can be run via Docker, mapping a data volume and exposing port 8090. The web interface is then accessible at http://127.0.0.1:8090. The default administrator account ships with well-known credentials (admin@certimate.fun / 1234567890), so changing the password after first login is advisable. Full documentation is available at docs.certimate.me, including a migration guide for v0.4, an article on completing ACME DNS-01 challenges via CNAME, and a discussion of the project's rationale. The project is MIT-licensed, distributed as-is without warranty, and accepts community contributions through GitHub issues and pull requests. Community channels include a Telegram group and a WeChat group.