wangwanjie / gately
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS, Windows; imports Lucky configs.
caddyserver / caddy
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
ltaoo / wx_channels_download
微信视频号下载器
Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
openbao / openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
ZeroDayEvil / CVE-2026-54121-Certighost
🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.
heise3 / ExtremaRank
Native R and Python sample-deletion robustness for omics: candidate certificates, minimum deletion bounds, Bioconductor model refits and donor-level pseudobulk
claration / feather
Free on-device iOS/iPadOS application manager/installer, using certificates part of the Apple Developer Program.
projectdiscovery / httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
CrocSwap / integer-mult-bounds
Conditional integer multiplication: kappa > 2^-15. Community proofs, exact certificates and reproducible audits; assumes the OpenAI #109 framework.
grwth404 / PHP_eCertificate_Generator
Let's Generate eCertificates
Mbed-TLS / mbedtls
An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
emexlab / Nyxian
IDE to develop native code iOS apps and utilities on stock iOS it self just via a certificate and a custom micro kernel for those apps.
certd / certd
开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书，nginx证书自动续签自动部署
certifi / python-certifi
(Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
Cygnux-Labs / Tracekit
Tamper-evident tracing, policy gates and cross-checks for AI agents: see what the agent did, and why.
certbot / certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
go-acme / lego
Let's Encrypt/ACME client and library written in Go
certimate-go / certimate
An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具，申请、部署、续期、监控全流程自动化可视化，支持各大主流云厂商。
microsoft / winappCli
winapp, the Windows App Development CLI, is a single command-line interface for managing Windows SDKs, packaging, generating app identity, manifests, certificates, and using build tools with any app framework.
gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
letsencrypt / boulder
An ACME-based certificate authority, written in Go.
yuezk / GlobalProtect-openconnect
A GlobalProtect VPN client for Linux and macOS, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.
smallstep / certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Alamofire / Alamofire
Elegant HTTP Networking in Swift
linuxserver / docker-swag
Nginx webserver and reverse proxy with php support and a built-in Certbot (Let's Encrypt) client. It also contains fail2ban for intrusion prevention.
simple-acme / simple-acme
A simple cross platform ACME client (for use with Let's Encrypt et al.)
httptoolkit / frida-interception-and-unpinning
Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
openai / NavierStokesAndEuler
Lean certificates accompanying Navier-Stokes and Euler results
fabriziosalmi / certmate
Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure
Safe3 / openresty-manager
Modern, secure, and elegant server control panel, alternative to OpenResty Edge and Nginx Proxy Manager.
SSLMate / certspotter
Lightweight Certificate Transparency Log Monitor
itflow-org / itflow
All in One PSA for MSPs, which Unifies client, contact, vendor, asset, license, domain, ssl certificate, password, documentation, file, network and location management with ticketing and billing capabilities, with a client portal on the side.
google / certificate-transparency-go
Auditing for TLS certificates (Go code)
kpcyrd / sn0int
Semi-automatic OSINT framework and package manager
emberstack / kubernetes-reflector
Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.
FrizzleM / BreakFree
A free iOS shortcut that lets you sideload unlimited apps on your iOS and iPadOS device using an Apple blocking DNSs and public certificates
Ashmmmm / crockTail
crockTail is a passive OSINT (Open Source Intelligence) reconnaissance tool. Given a target domain, it aggregates publicly available information — DNS records, IP/ASN ownership, SSL/TLS certificate details, and domain registration data — into a single consolidated report.
cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
caddyserver / certmagic
Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
eworm-de / routeros-scripts
a collection of scripts for MikroTik RouterOS
privacyidea / privacyidea
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
thalesgroup-cert / Watcher
Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.
7ritn / VaulTLS
Selfhostable web app to make managing mTLS certificates a breeze
Hakky54 / certificate-ripper
🔐 A CLI tool to extract server certificates
openai / ten-proofs
Lean certificates accompanying ten proofs in mathematics and theoretical computer science
Mesutcydev / ForgeSign-iOS
ForgeSign for iOS — on-device IPA re-signer. Sign, install and manage IPAs entirely on the device: zsign engine, liquid-glass UI, remembered certificates with expiry countdown, signed-app library, loopback OTA install.
g0h4n / PassTheCert-rs
Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀
smallstep / cli
🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.
srvrco / getssl
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
webprofusion / certify
Professional ACME Client for Windows (and now cross-platform via Certify Management Hub). Certificate Management UI, powered by Let's Encrypt and compatible with all ACME v2 CAs. Used by over 150,000 organisations. Download from certifytheweb.com
jakehildreth / Locksmith
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
PeculiarVentures / PKI.js
PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
polymind-inc / acmebot
Automated ACME SSL/TLS certificate management built around Azure Key Vault
rmbolger / Posh-ACME
PowerShell module and ACME client to create certificates from Let's Encrypt (or other ACME CA)
ADScanPro / adscan
Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.
gregtwallace / certwarden
Cert Warden is a centralized ACME Client. It provides an API for certificate consumers to fetch their individual keys and certs with API keys.
xipki / xipki
XiPKI: Compact open source PKI (CA, OCSP responder, certificate protocols ACME, CMP, EST, SCEP), with full support of PQC MLDSA (Dilithium) and MLKEM (Kyber).
dogtagpki / pki
The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
rustls / rcgen
Generate X.509 certificates, CSRs