Best Self-hosted Certificates, PKI & TLS Automation tools in 2026

8 self-hosted open source alternatives in this category

8 services found

Infisical

Infisical

Open-source platform for secrets, PKI certificates, and privileged access

25.1k
1.7k
Last commit: 9h ago

Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

Alternative to:
HashiCorp Vault
HashiCorp Vault
+9
Nginx UI

Nginx UI

Web UI for managing Nginx configurations, certificates, and logs

10.7k
777
Last commit: 7d ago

Self-hosted web interface to manage Nginx configs, reload safely, issue Let’s Encrypt certificates, view logs, monitor server stats, and manage multiple nodes.

Alternative to:
NGINX Management Suite
NGINX Management Suite
+4
step-ca

step-ca

Private certificate authority and ACME server for X.509 and SSH

8.3k
532
Last commit: 1d ago

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Alternative to:
HashiCorp Vault
HashiCorp Vault
+7
Cert Warden

Cert Warden

Centralized ACME certificate manager with REST API and UI

487
18
Last commit: 2mo ago

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and Re...

Alternative to:
Caddy Cloud
Caddy Cloud
+5
VaulTLS

VaulTLS

Web application to generate and manage mTLS certificates.

322
8
Last commit: 25d ago

Self-hosted web app to generate, manage and distribute mTLS client and server certificates with OIDC auth, email alerts and a REST API.

Alternative to:
Venafi TLS Protect
Venafi TLS Protect
+5
mkcert Web UI

mkcert Web UI

Web interface for mkcert CLI to manage development TLS certificates

201
7
Last commit: 1mo ago

Web-based UI for mkcert to generate, download, and monitor locally-trusted development TLS/SSL certificates with SCEP, authentication, Docker deployment, and email alerts...

Alternative to:
ZeroSSL
ZeroSSL
+6
Easypanel

Easypanel

Server control panel for deploying and managing Docker apps

Self-hosted control panel to deploy, manage, and monitor Docker-based apps with domains, SSL, environment variables, and one-click services.

Alternative to:
Coolify Cloud
Coolify Cloud
+15
Cloudron

Cloudron

Self-hosted app platform with updates, backups, and HTTPS

Cloudron is a self-hosted platform for deploying and managing web apps with one-click installs, automatic updates, backups, and integrated HTTPS, email, and user manageme...

Alternative to:
Cloudron
Cloudron
+19