Administracion-Abierta / AutoFirme

Client-side-rendered SPA: sign and verify documents with X.509 certificates, entirely in the browser. No backend, no key material leaving the client.

wangwanjie / gately

Open-source, auditable network gateway toolkit: DDNS, STUN traversal, port forwarding, reverse proxy, ACME certificates, WAF, Tailscale, frp in a single binary.

acmesh-official / acme.sh

A pure Unix shell script ACME client for SSL / TLS certificate automation

Alamofire / Alamofire

Elegant HTTP Networking in Swift

certbot / certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.

Infisical / infisical

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.

cert-manager / cert-manager

Automatically provision and manage TLS certificates in Kubernetes

projectdiscovery / httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

go-acme / lego

Let's Encrypt/ACME client and library written in Go

certimate-go / certimate

An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具，申请、部署、续期、监控全流程自动化可视化，支持各大主流云厂商。

smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

openbao / openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

nginx-proxy / acme-companion

Automated ACME SSL certificate generation for nginx-proxy

letsencrypt / boulder

An ACME-based certificate authority, written in Go.

caddyserver / certmagic

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

certd / certd

开源SSL证书管理工具；全自动证书申请、更新、续期；通配符证书，泛域名证书申请；证书自动化部署到阿里云、腾讯云、主机、群晖、宝塔；https证书，pfx证书，der证书，TLS证书，nginx证书自动续签自动部署

claration / feather

Free on-device iOS/iPadOS application manager/installer, using certificates part of the Apple Developer Program.

smallstep / cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

google / trillian

A transparent, highly scalable and cryptographically verifiable data store.

allinssl / allinssl

AllinSSL 是一个集证书申请、管理、部署和监控于一体的SSL证书全生命周期管理工具。AllinSSL is an all-in-one SSL certificate lifecycle management tool that integrates certificate application, management, deployment, and monitoring.

kpcyrd / sn0int

Semi-automatic OSINT framework and package manager

square / certstrap

Tools to bootstrap CAs, certificate requests, and signed certificates.

httptoolkit / frida-interception-and-unpinning

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

yuezk / GlobalProtect-openconnect

A GlobalProtect VPN client for Linux and macOS, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.

srvrco / getssl

obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.

openai / NavierStokesAndEuler

Lean certificates accompanying Navier-Stokes and Euler results

GhostPack / Certify

Active Directory certificate abuse.

eworm-de / routeros-scripts

a collection of scripts for MikroTik RouterOS

privacyidea / privacyidea

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)

webprofusion / certify

Professional ACME Client for Windows (and now cross-platform via Certify Management Hub). Certificate Management UI, powered by Let's Encrypt and compatible with all ACME v2 CAs. Used by over 150,000 organisations. Download from certifytheweb.com

emberstack / kubernetes-reflector

Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.

jakehildreth / Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

fabriziosalmi / certmate

Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure

Safe3 / openresty-manager

Modern, secure, and elegant server control panel, alternative to OpenResty Edge and Nginx Proxy Manager.

thalesgroup-cert / Watcher

Watcher - Open Source AI-powered Cyber Threat Intelligence & Hunting Platform. Developed with Django & React JS.

PeculiarVentures / PKI.js

PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.

microsoft / winappCli

winapp, the Windows App Development CLI, is a single command-line interface for managing Windows SDKs, packaging, generating app identity, manifests, certificates, and using build tools with any app framework.

freeipa / freeipa

Mirror of FreeIPA, an integrated security information management solution

emexlab / Nyxian

IDE to develop native code iOS apps and utilities on stock iOS it self just via a certificate and a custom micro kernel for those apps.

JonasAlfredsson / docker-nginx-certbot

Automatically create and renew website certificates for free using the Let's Encrypt certificate authority.

google / certificate-transparency-go

Auditing for TLS certificates (Go code)

SSLMate / certspotter

Lightweight Certificate Transparency Log Monitor

7ritn / VaulTLS

Selfhostable web app to make managing mTLS certificates a breeze

polymind-inc / acmebot

Automated ACME SSL/TLS certificate management built around Azure Key Vault

dokku / dokku-letsencrypt

Automatic Let's Encrypt TLS Certificate installation for dokku

square / certigo

A utility to examine and validate certificates in a variety of formats

itflow-org / itflow

All in One PSA for MSPs, which Unifies client, contact, vendor, asset, license, domain, ssl certificate, password, documentation, file, network and location management with ticketing and billing capabilities, with a client portal on the side.

AthenZ / athenz

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

certifi / python-certifi

(Python Distribution) A carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.

v-fidelusaleksander / ghcertified

Prepare for GitHub Certification exams!

enix / x509-certificate-exporter

A Prometheus exporter for X.509 certificates, built for Kubernetes first but equally happy as a standalone binary

amplify-education / serverless-domain-manager

Serverless plugin for managing custom domains with API Gateways.

Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

rmbolger / Posh-ACME

PowerShell module and ACME client to create certificates from Let's Encrypt (or other ACME CA)

star7th / coolmonitor

一个高颜值的监控工具，支持网站监控/接口监控/HTTPS证书监控等。CoolMonitor is a beautiful monitoring tool that supports website monitoring, API monitoring, HTTPS certificate monitoring, and more...

smallstep / autocert

⚓ A kubernetes add-on that automatically injects TLS/HTTPS certificates into your containers

letsencrypt / pebble

A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server not suited for a production certificate authority.

ADScanPro / adscan

Free Active Directory pentesting tool for Linux, macOS and Windows. Automates AD and LDAP enumeration, Kerberoasting, ASREPRoast, password spraying, ADCS/ESC1, DCSync, RBCD, gMSA, shadow credentials, NTLM relay and credential dumping across 104 techniques, mapping BloodHound-compatible attack paths to Domain Admin. NIS2 / ISO 27001 reports.