What is Certimate used for?

Certimate is a self-hosted ACME tool with a visual workflow that automates issuing, deploying, renewing and monitoring SSL/TLS certificates across many DNS and cloud providers. It is a good fit for automating certificate renewal across clouds, deploying certificates to CDNs and load balancers, and replacing manual certbot scripts.

Is Certimate open source?

Yes. Certimate is open source under the MIT licence. Its source code is on GitHub at certimate-go/certimate and is written mainly in Go.

Yes. Certimate is open source, so the software itself is free to use.

Can I self-host Certimate?

Yes. Certimate can be self-hosted on your own server or infrastructure; there is no official hosted version.

What is Certimate an alternative to?

Certimate is an open-source alternative to Sectigo and Keyfactor. Other open-source alternatives to Sectigo include step-ca, Certd and acme.sh.

Is Certimate actively maintained?

Yes. The most recent commit to Certimate was on 28 September 2026, and the latest release is v0.4.34, published on 28 September 2026. The project has 9.3k stars on GitHub.

Certimate: open-source alternative to Sectigo, Keyfactor

About Certimate

Certimate is an open-source, free, self-hosted tool for managing SSL certificates through the ACME protocol. It automates the full lifecycle, from issuing a certificate to deploying it, renewing it and watching its status, using a visual workflow instead of hand-written scripts.

It can request single-domain, multi-domain and wildcard certificates as well as IP address certificates, in RSA or ECC, using DNS-01 or HTTP-01 challenges, and export them as PEM, PFX or JKS. It supports more than 70 domain providers, such as AWS, Cloudflare, GoDaddy, Alibaba Cloud and Tencent Cloud, and more than 160 deployment targets including Kubernetes, CDNs, WAFs and load balancers. ACME authorities include Let's Encrypt, Google Trust Services, ZeroSSL, SSL.com and Actalis, and notifications can go to email, Discord, Slack, Telegram, DingTalk, Feishu and WeCom.

Certimate is a single Go program with no database or runtime to install, uses little memory, and runs on Windows, Linux and macOS, either as a downloaded binary or in Docker. All data is stored locally. It is MIT licensed and suits administrators who manage many certificates across providers.

Key features

Visual workflows for certificate lifecycle
Wildcard, multi-domain and IP certificates
DNS-01 and HTTP-01 challenges
PEM, PFX and JKS formats
70+ DNS providers and 160+ deployment targets
Multiple ACME certificate authorities
Notifications by email, Slack, Discord and more
Single binary or Docker install

Good fit for

→Automating certificate renewal across clouds
→Deploying certificates to CDNs and load balancers
→Replacing manual certbot scripts

Built with: Go
Tags: ssl; tls; acme; certificates; letsencrypt; self-hosted; automation; devops; golang

Certimate: questions and answers

What is Certimate used for?: Certimate is a self-hosted ACME tool with a visual workflow that automates issuing, deploying, renewing and monitoring SSL/TLS certificates across many DNS and cloud providers. It is a good fit for automating certificate renewal across clouds, deploying certificates to CDNs and load balancers, and replacing manual certbot scripts.
Is Certimate open source?: Yes. Certimate is open source under the MIT licence. Its source code is on GitHub at certimate-go/certimate and is written mainly in Go.
Is Certimate free?: Yes. Certimate is open source, so the software itself is free to use.
Can I self-host Certimate?: Yes. Certimate can be self-hosted on your own server or infrastructure; there is no official hosted version.
What is Certimate an alternative to?: Certimate is an open-source alternative to Sectigo and Keyfactor. Other open-source alternatives to Sectigo include step-ca, Certd and acme.sh.
Is Certimate actively maintained?: Yes. The most recent commit to Certimate was on 28 September 2026, and the latest release is v0.4.34, published on 28 September 2026. The project has 9.3k stars on GitHub.