Self-hosted TLS certificate automation for any CA or server, available for free.
Product memo
Teams managing server fleets use certctl to automate the full TLS certificate lifecycle. It handles issuance, deployment, monitoring, renewal, and revocation across any server with any Certificate Authority. This self-hosted, open-core approach gives users complete control over their data and hardware, removing the per-certificate costs of traditional enterprise PKI platforms.
For who
Teams managing fleets of servers and TLS certificates
Solves what
Automates the entire TLS certificate lifecycle: issuance, deployment, renewal, and revocation.
- Self-hosted control plane
- Automated renewal and deployment
- Supports any CA and target
In their own words
47-day TLS certs
The CA/Browser Forum’s SC-081v3 ballot caps public TLS certificates at 200 days by March 2026 , 100 days by 2027 , and 47 days by 2029. A team managing 100 certificates ships 7+ renewals per week. Forever. Manual workflows are a math problem, not a tooling preference.
Automates the entire certificate lifecycle — issue, deploy, monitor, renew, revoke — across every server in your fleet. Any CA. Any target. Self-hosted. Free.
Commercial cues
Model
free only
Free tier
Yes
Trial
No
Pricing Strategy
Certctl offers a free tier, with Enterprise handled through custom pricing.
- • A free open-core model provides core automation without upfront cost.
- • It avoids per-certificate or per-agent fees, cutting operational expenses.
- • Free tier lowers testing friction.
Operator context
Operating setup
Team
Indie / lean
LLM classification
Founded
May 2026
Platform
Web app
Audience
Developers
Social footprint
Builder Strategy
- Strategy Type
- Niche Specialist
- Stage
- Bootstrapped Lean
- Effort
- Small Team
About certctl Expand
Certctl provides a self-hosted platform that automates the entire TLS certificate lifecycle. It helps teams managing fleets of servers handle issuance, deployment, monitoring, renewal, and revocation across any server target and Certificate Authority.
This open-core product serves as a cost-effective alternative to expensive enterprise PKI platforms by removing per-certificate and per-agent fees. Teams gain full control over their data and hardware, making certctl a practical option for those prioritizing both security and operational efficiency.