smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

randombit / botan

Cryptography Toolkit

SSLMate / certspotter

Lightweight Certificate Transparency Log Monitor

openwisp / openwisp-controller

Network and WiFi controller: provisioning, configuration management and updates, (pull via openwisp-config or push via SSH), x509 PKI management and more. Mainly OpenWRT, but designed to work also on other systems.

phpseclib / phpseclib

PHP Secure Communications Library

digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

smallstep / cli

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

square / certigo

A utility to examine and validate certificates in a variety of formats

enix / x509-certificate-exporter

A Prometheus exporter for X.509 certificates, built for Kubernetes first but equally happy as a standalone binary

Hakky54 / certificate-ripper

🔐 A CLI tool to extract server certificates

letsencrypt / pebble

A miniature version of Boulder, Pebble is a small RFC 8555 ACME test server not suited for a production certificate authority.

openxpki / openxpki

OpenXPKI Code