automation

certmate

Self-hosted certificate lifecycle management: issue, renew, discover, inventory and deploy TLS certificates across your infrastructure
1,474 stars+13★ this week119 forksPythonUpdated 10/21/2026100% free · open source
What it does

Self‑hosted tool that automatically discovers, inventories, issues, renews and deploys TLS certificates across your whole infrastructure.

When to use it
  • •You run multiple services (K8s, VMs, load balancers) and need a single source of truth for all TLS certificates.
  • •Manual certificate renewal is causing downtime or security gaps.
  • •You want to automate issuance from Let’s Encrypt or an internal PKI without relying on external SaaS.
Ready-to-paste prompt
certmate -c config.yaml renew --domains api.example.com,db.example.com --provider letsencrypt
Heads up: Certmate requires Python 3.9+ and a recent OpenSSL (≥1.1.1); using an older runtime will cause ACME challenges to fail.
Saves to your device
Use with Claude
New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

🔑 Needs an API key

Works after you add credentials — the setup agent will ask you for them.

Try it instantly — no install
Claude Code
mkdir -p ~/.claude/skills/certmate && curl -fsSL https://workflowstacks.com/api/skills/certmate/claude-skill -o ~/.claude/skills/certmate/SKILL.md
Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)
claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How certmate works
Codeflow
Free to inspect

Certmate is a very large Python project (~95k lines across 179 code files, plus 632 test files). Setup is light: installs like a normal app — add your API keys. Reading the code is optional. Last commit this month, MIT license, has a test suite.

Size
Very large codebase
~95k lines · 179 code files · days to read — use, don't read
Setup
One-command install
Installs like a normal app — add your API keys. Reading the code is optional.
Runs on
Python · Docker
Needs API keys (.env)
Python 84%JavaScript 8%HTML 7%Shell 1%
Where to start reading
  1. 1
    README.md
    Start here — what it does and how to install it
  2. 2
    app.py
    Where the program starts running
  3. 3
    package.json
    Dependencies and the commands it exposes
  4. 4
    .env.example
    The API keys and settings you must provide
  5. 5
    demo/README.md
    A worked example — copy this to get going
What's in each folder
modules/Sub-packages / plugins118 files
docs/Documentation226 files
templates/Templates30 files
demo/Examples you can copy4 files
scripts/Helper scripts26 files
charts/Folder14 files
deploy/Deployment / infrastructure14 files
clients/SDKs / client libraries11 files
READMEHas testsDocumentedCI checksDocker readyExamples includedMIT licenseUpdated this month
Quick Actions
Details
Creator
fabriziosalmi
Language
Python
Category
automation
Published
6/24/2025

Are you the creator of this tool? and earn 85% of every sale.

Show it off in your README:

Featured on WorkflowStacks
[![Featured on WorkflowStacks](https://workflowstacks.com/api/badge/certmate.svg)](https://workflowstacks.com/skills/certmate?utm_source=github&utm_medium=badge)
🔥 Hot this week, in your inbox
Skills like this, every Monday.

The five fastest-growing open-source AI skills, ranked by GitHub star growth. One email a week, unsubscribe anytime.