SSL certificate lifetimes are dropping to 47 days, and your annual renewal checklist isn't going to cut it anymore. We built CertKit to solve this for ourselves, and today we're opening it up to everyone.

TrackJS Blog

SSL certificate lifetimes are being reduced to 47 days, making manual renewal processes unworkable. TrackJS built CertKit to address their own needs: a centralized ACME client that renews certificates and distributes them across mixed infrastructure including Windows servers, Linux hosts, and Java Keystores. Unlike certbot, it handles wildcard certificates, non-publicly-accessible servers, and actively monitors that deployed certificates match expected thumbprints. CertKit is now out of beta and available publicly, with a 40% lifetime discount for subscribers before May 31.

Introducing CertKit: SSL Certificate Automation for the Rest of Us