← All Projects
Security & PKI

Certio

Self-signed PKI and TLS certificate management, in a single binary

Certio replaces the pile of openssl commands, .cnf files and .srl bookkeeping that a private certificate authority usually turns into. A web dashboard, a REST API and a CLI over the same engine — so a certificate issued from your terminal is identical to one issued from a browser or from CI.

View on GitHub Deploy on Miabi
GoLanguage
Apache-2.0License
docker pull jkaninda/certio

A look inside

Screenshots from Certio running in production.

Certio — Dashboard
Certio dashboard — certificate inventory, expiry timeline and audit activity
Certio — Certificate Export
Certio certificate export — PEM, PKCS#12, Kubernetes Secret and server snippets

Key Features

Create, import & manage roots and intermediate CAs
Full SAN support — DNS, IPv4/v6, email, URI & wildcards
Managed issuance or bring-your-own-CSR (key never leaves you)
Manual, bulk & automatic renewal with linked history
Revocation with RFC 5280 reason codes and CRL publishing
Export as PEM, PKCS#12, ZIP, Kubernetes Secret or server snippets
ACME (RFC 8555) endpoint for automated renewal
Deployment automation — K8s Secrets, SSH reload, webhooks
Name-constrained CAs and an OCSP responder
AES-256-GCM key encryption at rest, append-only audit log
TOTP two-factor auth, RBAC and scoped API tokens
Prometheus metrics and PEM inspection without storage

Get started with Certio

Check out the source code, read the docs, and start building.

GitHub RepositoryNeed help? Contact us