SSL certificate lifetimes are being reduced to 47 days, making manual renewal processes unworkable. TrackJS built CertKit to address their own needs: a centralized ACME client that renews certificates and distributes them across mixed infrastructure including Windows servers, Linux hosts, and Java Keystores. Unlike certbot, it handles wildcard certificates, non-publicly-accessible servers, and actively monitors that deployed certificates match expected thumbprints. CertKit is now out of beta and available publicly, with a 40% lifetime discount for subscribers before May 31.
Sort: