Issue free Let's Encrypt certs, store them in an encrypted vault, monitor expiry across every host, and push to your servers automatically. Plus four zero-signup tools for everyday cert debugging.
Encryption
AES-256 per-tenant
Auto-renew
Hands-off via DNS
Auth
OAuth + TOTP MFA
Free debugging tools anyone can use, an encrypted vault for teams, and set-and-forget automation so renewals never wake you up at 2 am.
Free · No signup
Everyday cert debugging that never asks for an email. Runs client-side where it can; stores nothing.
Starter → Team
Store cert material sealed with your tenant's key. Issue free Let's Encrypt certs and renew them without touching DNS once you connect Cloudflare.
Team → Enterprise
Share a tenant with colleagues, push certs to servers on a schedule or the moment a renewal lands, and keep an append-only audit log of everything.
Each step has a sensible default. Skip the ones you don't need — the anonymous tools alone cover most day-to-day cert work.
01
Request a free Let's Encrypt / ZeroSSL cert via DNS-01, pull from a paid CA like GoDaddy, or upload an existing PEM / CRT / KEY / PFX bundle. Every path ends in your encrypted vault.
02
Bundle cert + key + chain into a named group. Groups tie renewals to the servers that depend on them, so auto-deploy knows where to send the next rotation.
03
Add the servers or appliances that should receive each group. Pick a delivery method per target: pull-token (Linux, Windows, anywhere with curl), SSH, Synology DSM API, or Ribbon SBC REST.
04
Scheduled probes track expiry on every host. DNS-based auto-renew refreshes Let’s Encrypt certs without you touching DNS. Scheduled push sends the latest cert to each target on a cron — all of it captured in an append-only audit log.
Free forever for solo use. Paid plans unlock team invites, paid-CA pulls, scheduled push, and DNS-based unattended renewal. 14-day free trial on every paid plan.
Free
The essentials — always free for solo use.
Starter
Multi-CA + small team. Pull certs from GoDaddy et al.
Team
Set-and-forget automation for ops teams.
Enterprise
Unlimited scale with SSO for larger teams.
Need the comparison table, FAQ, or fine print?
See full pricing →Free tier is ready in under a minute. MFA enforced on every account. No credit card until you upgrade — and every paid plan ships a 14-day trial.