certimate

certimate-goMIT活跃维护

开源自托管的 SSL 证书 ACME 管理工具,把申请、部署、续期、监控全流程自动化并可视化,支持主流云厂商,省去手动折腾证书的麻烦。

An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具,申请、部署、续期、监控全流程自动化可视化,支持各大主流云厂商。

v0.4.37发布于 2026-11-09 03:21 UTC9,431star +7 / 7 天921fork同步于 2026-11-10 11:30 UTC

怎么上手

由 README 提炼,执行前请确认
docker run -d --name certimate --restart unless-stopped -p 8090:8090 -v /etc/localtime:/etc/localtime:ro -v /etc/timezone:/etc/timezone:ro -v $(pwd)/data:/app/pb_data certimate/certimate:latest
硬件要求按 README 说明

README 未说明具体硬件要求,仅称资源占用极低,约需 20 MB 内存;兼容 Windows、Linux、macOS。

有 Docker 镜像
下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

自托管 SSL 证书 ACME 工具,可视化自动完成申请、部署、续期与监控

开源自托管的 SSL 证书 ACME 管理工具,把申请、部署、续期、监控全流程自动化并可视化,支持主流云厂商,省去手动折腾证书的麻烦。

核心能力

  • 用可视化工作流编排证书申请到部署全流程
  • 支持单域名、多域名、通配符及 IP 地址证书
  • 同时支持 DNS-01 与 HTTP-01 两种质询方式
  • 对接 70+ 域名服务商与 160+ 部署目标
  • 支持 PEM、PFX、JKS 多种证书格式导出

容易踩的坑

默认监听 8090 端口,需浏览器访问 http://127.0.0.1:8090;默认管理员账号为 [email protected] / 1234567890,首次登录后应尽快修改;Docker 部署需挂载 /app/pb_data 目录,否则数据不会持久化。

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

5 个版本v0.4.37
  1. v0.4.37最新正式版2026-11-09 · 2026-11-09 03:21 UTC

    Changelog

    ✨ 新增功能

    • Webhook 预设回调模板新增 Boop 选项

    🐛 修复 Bug

    • 修复 #1497:SSH 预设脚本中部署证书到群晖 DSM 时会破坏套件证书文件属组
    • 修复 #1500:部署证书到 BytePlus 证书中心报错 "byteplusutil: service endpoint info missing: service 'certificate_service' not registered"
    • 修复 #1506:部署证书到移动云 VLB 弹性负载均衡报错 "500 - REGION_ID_ERROR"

    🛠 优化 & 其他改动

    • 为 SSH 预设脚本加入 set -u 指令
    • 优化部分文案

    Comparing changes: https://github.com/certimate-go/certimate/compare/v0.4.36...v0.4.37, by @fudiwei, @nxcjs, @orshih6, @usual2970

  2. v0.4.362026-10-26 · 2026-10-26 02:32 UTC
    查看更新说明

    Changelog

    ✨ 新增功能

    • 新增 DNS-01 提供商:LuaDNS
    • 新增部署提供商:阿里云 - 微服务引擎 MSE

    🐛 修复 Bug

    • 修复 #1489:修复上传证书节点在服务器证书未改变、仅中间证书变更时错误跳过上传

    🛠 优化 & 其他改动

    • 升级 gomod 依赖项
    • 升级 npm 依赖项

    Comparing changes: https://github.com/certimate-go/certimate/compare/v0.4.35...v0.4.36, by @fudiwei, @suavess, @usual2970

  3. v0.4.352026-10-12 · 2026-10-12 01:08 UTC
    查看更新说明

    Changelog

    ✨ 新增功能

    • SSH 授权凭据中支持使用 OpenSSH 用户证书认证

    🐛 修复 Bug

    • 修复 #1471:部署证书到 Cloudflare SSL 时报错
    • 修复 #1477:部署证书到阿里云相关产品时会重复上传证书到 CAS

    🛠 优化 & 其他改动

    • 优化部分文案

    Comparing changes: https://github.com/certimate-go/certimate/compare/v0.4.34...v0.4.35, by @fudiwei, @pooneyy, @usual2970

  4. v0.4.342026-09-28 · 2026-09-28 02:00 UTC
    查看更新说明

    Changelog

    ✨ 新增功能

    • 申请 ZeroSSL 证书时支持自动获取 EAB 凭据:EAB KID 与 HMAC Key 留空时,将使用证书联系邮箱自动向 ZeroSSL 获取

    🐛 修复 Bug

    • 修复 #1457:部署证书到 LeCDN v4 时报错
    • 修复 #1461:部署证书到火山引擎 WAF 时报错

    🛠 优化 & 其他改动

    • 证书列表页新增「主题名称(CN)」与「主题备用名称(SAN)」两列,SAN 列最多展示 3 个域名,超出部分以 +N 显示
    • 证书详情页中的主题备用名称改为以标签形式逐个展示

    Comparing changes: https://github.com/certimate-go/certimate/compare/v0.4.33...v0.4.34, by @asd80703406, @fudiwei, @usual2970, @Yeqingky

  5. v0.4.332026-09-15 · 2026-09-15 03:53 UTC
    查看更新说明

    Changelog

    ✨ 新增功能

    • 新增部署提供商:腾讯云 DDoS 高防
    • 新增部署提供商:橙域网络网迹 CDN
    • 部署证书到 SSH 远程主机时支持以 REPL 模式执行前、后置命令
    • 部署证书到火山引擎 CLB 传统型负载均衡时支持指定扩展域名
    • 部署证书到 LeCDN 时支持 LeCDN v4
    • LeCDN 授权凭据中支持选择 API 认证方式为 API Key

    🐛 修复 Bug

    • 修复 #1452:新网 DNS API 接口返回 404 错误
    • 修复 #1453:部署证书到 Kubernetes 时当 Secret 不存在时返回 405 错误
    • 修复因 DCloud 登录接口变更导致无法部署证书到 uniCloud 的问题

    🛠 优化 & 其他改动

    • 升级 gomod 依赖项
    • 升级 npm 依赖项

    Comparing changes: https://github.com/certimate-go/certimate/compare/v0.4.32...v0.4.33, by @bangbang93, @fudiwei, @gdyr, @usual2970, @xinyihl

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    Stars Forks Docker Pulls Release License

    Ask DeepWiki Ask Zread

    English | 简体中文


    🚩 Introduction

    An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually.

    • Self-hosted: Private deployment. All data is stored locally, to ensure data privacy and security.
    • Cross Platforms: Compatible with various operating systems, including Windows/Linux/macOS.
    • Zero Dependencies: No need to install databases, runtimes, or any frameworks. Ready to use out of the box.
    • Low Resource Usage: Extremely lightweight, requiring only ~20 MB of memory.
    • Easy to Use: Automates certificate management with a visual workflow — all with just a few simple configurations.

    💡 Features

    • Flexible workflow orchestration, fully automation from certificate application to deployment.
    • Supports requesting single/multiple/wildcard domain certificates, IP address certificates, with options for RSA or ECC key.
    • Supports DNS-01 challenge and HTTP-01 challenge both.
    • Supports various certificate formats such as PEM, PFX, JKS.
    • Supports more than 70+ domain registrars (e.g., AWS, Cloudflare, GoDaddy, Alibaba Cloud, Tencent Cloud, etc. Check out full providers).
    • Supports more than 160+ deployment destinations (e.g., Kubernetes, CDN, WAF, load balancers, etc. Check out full providers).
    • Supports multiple notification channels including email, Discord, Slack, Telegram, DingTalk, Feishu, WeCom, and more.
    • Supports multiple ACME CAs including Let's Encrypt, Actalis, Google Trust Services, SSL.com, ZeroSSL, and more.
    • More features waiting to be discovered.

    🚀 Quick Start

    Run Certimate in 1 minute!

    Download the archived package of precompiled executable files directly from GitHub Releases, extract and then execute:

    ./certimate serve
    
    docker run -d \
      --name certimate \
      --restart unless-stopped \
      -p 8090:8090 \
      -v /etc/localtime:/etc/localtime:ro \
      -v /etc/timezone:/etc/timezone:ro \
      -v $(pwd)/data:/app/pb_data \
      certimate/certimate:latest
    

    Visit http://127.0.0.1:8090 in your browser.

    Default administrator account:

    Work with Certimate right now. Or read other content in the documentation to learn more.

    📄 Documentation

    For full documentation, please visit docs.certimate.me.

    Related articles:

    🖥️ Screenshot

    Screenshot

    🤝 Contributing

    Certimate is a free and open-source project, and your feedback and contributions are needed and always welcome. Contributions include but are not limited to: submitting code, reporting bugs, sharing ideas, or showcasing your use cases based on Certimate. We also encourage users to share Certimate on personal blogs or social media.

    For those who'd like to contribute code, see our Contribution Guide.

    Issues and Pull Requests are opened at https://github.com/certimate-go/certimate.

    Contributors

    Contributors

    ⛔ Disclaimer

    This repository is available under the MIT License, and distributed “as-is” without any warranty of any kind. The authors and contributors are not responsible for any damages or losses resulting from the use or inability to use this software, including but not limited to data loss, business interruption, or any other potential harm.

    No Warranties: This software comes without any express or implied warranties, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

    User Responsibilities: By using this software, you agree to take full responsibility for any outcomes resulting from its use.

    🌐 Join the Community

    ⭐ Star History

    Star Certimate on GitHub and be instantly notified of new releases!