Self-hosted Certificates, PKI & TLS Automation tools

Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

Actively maintained

Alternative to:

HashiCorp Vault+9

Self-hosted web interface to manage Nginx configs, reload safely, issue Let’s Encrypt certificates, view logs, monitor server stats, and manage multiple nodes.

AGPL-3.0Actively maintained

Alternative to:

NGINX Management Suite+4

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Apache-2.0Actively maintained

Alternative to:

HashiCorp Vault+7

Self-hosted web app to generate, manage and distribute mTLS client and server certificates with OIDC auth, email alerts and a REST API.

GPL-3.0Actively maintained

Alternative to:

Venafi TLS Protect+5

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and React UI.

Actively maintained

Alternative to:

Caddy Cloud+5

Web-based UI for mkcert to generate, download, and monitor locally-trusted development TLS/SSL certificates with SCEP, authentication, Docker deployment, and email alerts.

GPL-3.0Actively maintained

Alternative to:

ZeroSSL+6

Cloudron is a self-hosted platform for deploying and managing web apps with one-click installs, automatic updates, backups, and integrated HTTPS, email, and user management.

Activity unknown

Alternative to:

Cloudron+19

Self-hosted control panel to deploy, manage, and monitor Docker-based apps with domains, SSL, environment variables, and one-click services.

Activity unknown

Alternative to:

Coolify Cloud+15