#1
step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.
8.8k stars580 forksApache-2.0last commit Actively maintained
The self-hosted Let's Encrypt alternative
Certificate Authority that issues and automatically renews TLS/SSL certificates via the ACME protocol. Operated by the nonprofit ISRG, it provides ACME clients, domain validation methods, and tooling/documentation for HTTPS deployment.
Alternatives to Let's Encrypt
What replacing Let's Encrypt actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 1 of 1 shipped a commit in the last six months. Licences in this list: Apache-2.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Certificates, PKI & TLS Automation.
