certctl

certctl is a self-hosted platform that automates the entire TLS certificate lifecycle — from issuance through renewal to deployment — with zero human intervention. It works with any certificate authority, deploys to any server, and keeps private keys on your infrastructure where they belong. The server can be deployed via Docker Compose or built manually from source. Environment variables like CERTCTL_DATABASE_URL and CERTCTL_AUTH_TYPE are used for configuration.